Senior GRC / Third-Party Risk / Data Protection Analyst

The Senior GRC / Third-Party Risk / Data Protection Analyst will own and operate the governance, risk, and compliance program for California's health benefit exchange, ensuring audit‑ready compliance with NIST SP 800‑53 Rev. 5, ARC‑AMPE, and IRS Publication 1075. The role involves authoring policies, testing controls, managing POA&Ms, conducting vendor risk assessments, leading data protection initiatives, and supporting insider threat and incident response activities.