Find Jobs

Find Jobs Near You – Available Work in Your Location

Skip to job details

Back to Results

Apply for this opportunity

To apply for this job, you'll continue to an external website or email application.

Apply Offsite

Cottage Health System

Governance Risk & Compliance Analyst Senior

Pay: Not specified

Posted: 7 weeks ago

Location: Santa Barbara, CA (Onsite)

Last Updated: 5 days ago

Hours: Full-Time

Expires: 10/9/2026

Career Insights for Compliance Officer / Analyst

See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.

Scorecard

Based on California data

Review key factors to help you decide if this role fits your goals. How is this calculated?

Were these scores useful?

What they do

A Compliance Officer or Analyst monitors internal compliance with company policies and also company compliance with local, state and federal laws. Reviews company documents, including contracts and marketing materials; communicates with employees and develops training and internal policy materials.

$80,933 / year median in California

-2% projected decline

Explore Career

Job Description

Cottage Health seeks a Governance Risk & Compliance Analyst Senior for their CH ITS Security department. This position will lead security governance, risk management, and compliance activities across the organization. This role partners with IT, business, and vendor stakeholders to identify security risks, ensure regulatory compliance, and strengthen Cottage Health's overall security program and risk management capabilities.

Key responsibilities include:

Lead and maintain security governance, risk, and compliance initiatives. Conduct security risk assessments and manage the enterprise Security Risk Register. Support HIPAA, PCI, and other regulatory compliance activities. Assess third-party vendors and monitor compliance with security requirements. Develop security metrics and report risk and compliance status to leadership. Create and maintain security policies, standards, and governance processes. Recommend risk mitigation strategies and drive remediation efforts. All job qualifications listed indicate the minimum level necessary to perform this job proficiently.

LEVEL OF EDUCATION

Minimum:

Bachelor's Degree in Computer Science or related field; or equivalent experience (8 years)

CERTIFICATIONS, LICENSES, REGISTRATIONS

Minimum:

One or more of the following industry certifications: Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP),Certified in Risk and Information Systems Control (CRISC), SANS Security Awareness Professional, CompTIA Security+, CompTIA CySA+ Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), GIAC Security Essentials (GSEC), Certified Cloud Security Professional (CCSP), Systems Security Certified Practitioner (SSCP), Advanced in AI Audit (AAIA), Certified Data Privacy Solutions Engineer (CDPSE), Certified in the Governance of Enterprise IT (CGEIT), Certified Cybersecurity Operations Analyst (CCOA)

TECHNICAL REQUIREMENTS

Minimum:

Working knowledge of HIPAA, PCI, and cybersecurity governance frameworks

YEARS OF RELATED WORK EXPERIENCE

Minimum:

3-5 years of IT audit, risk management, or information security compliance experience, operating independently with limited supervision