Lead Information Risk Analyst

Centene Corporation•St. David's, MO

About The Position

You could be the one who changes everything for our 28 million members. Centene is transforming the health of our communities, one person at a time. As a diversified, national organization, you’ll have access to competitive benefits including a fresh perspective on workplace flexibility. Position Purpose: The Security Compliance Lead Information Risk Analyst is a senior individual contributor role with enterprise-wide responsibility for security governance, compliance execution, audit readiness, and GRC platform leadership. The role operates independently, leads complex cross functional initiatives, and serves as a subject matter authority, without formal people management responsibilities. Scope & Impact: Leads within multiple enterprise compliance domains simultaneously (policy governance, control frameworks, audits, GRC platforms). Leads cross-functional initiatives impacting Information Security, Privacy, IT, Audit, and Governance. Work has enterprise-wide risk and regulatory impact, including audit readiness and certification outcomes. Accountable for end-to-end delivery of complex compliance efforts, not just task execution. Decision-Making & Influence: Independently analyzes and interprets regulatory requirements and control frameworks to inform risk and compliance considerations. Provides expert input on compliance approaches, control alignment options, and documentation practices, influencing program direction and outcomes. Acts as a subject-matter escalation point for complex compliance, risk, and audit issues, advising stakeholders on risks and trade-offs. Delivers well-reasoned recommendations that guide governance discussions and support executive decision-making. Leadership Expectations (Non-People Manager): Provides functional leadership to analysts and contributors through guidance, peer review, and quality oversight. Drives governance forums, SME reviews, and steering committee execution. Influences senior stakeholders through expertise rather than positional authority. Mentors others informally but does not conduct performance management. Complexity & Problem Solving: Handles ill-defined, ambiguous problems where standards or controls do not yet exist. Interprets new frameworks (e.g., ARC, AMPE) and translates them into actionable enterprise controls. Balances competing regulatory, technical, and operational constraints. Manages sustained workload over standard capacity with frequent context switching. Stakeholder Interaction: Regular interaction with senior leaders, auditors, and governance bodies. Acts as a trusted advisor on compliance posture and risk interpretation. Represents compliance function in cross-program initiatives and audits. Performs other duties as assigned. Complies with all policies and standards.

Requirements

Bachelor's degree in IT, MIS, Accounting, Finance, Business Administration, related field or equivalent experience.
6+ years of combined auditing and IT controls design experience.
Knowledge of IT systems and processes and experience evaluating internal technical control systems required.

Nice To Haves

CISA, CISSP, or PMP preferred

Responsibilities

Leads within multiple enterprise compliance domains simultaneously (policy governance, control frameworks, audits, GRC platforms).
Leads cross-functional initiatives impacting Information Security, Privacy, IT, Audit, and Governance.
Independently analyzes and interprets regulatory requirements and control frameworks to inform risk and compliance considerations.
Provides expert input on compliance approaches, control alignment options, and documentation practices, influencing program direction and outcomes.
Acts as a subject-matter escalation point for complex compliance, risk, and audit issues, advising stakeholders on risks and trade-offs.
Delivers well-reasoned recommendations that guide governance discussions and support executive decision-making.
Provides functional leadership to analysts and contributors through guidance, peer review, and quality oversight.
Drives governance forums, SME reviews, and steering committee execution.
Influences senior stakeholders through expertise rather than positional authority.
Mentors others informally but does not conduct performance management.
Handles ill-defined, ambiguous problems where standards or controls do not yet exist.
Interprets new frameworks (e.g., ARC, AMPE) and translates them into actionable enterprise controls.
Balances competing regulatory, technical, and operational constraints.
Manages sustained workload over standard capacity with frequent context switching.
Regular interaction with senior leaders, auditors, and governance bodies.
Acts as a trusted advisor on compliance posture and risk interpretation.
Represents compliance function in cross-program initiatives and audits.
Performs other duties as assigned.
Complies with all policies and standards.