Benefits

• Paid Time Off & Paid Company Holidays
• Medical, Dental, Vision & Life Insurance
• Flexible Spending Account (FSA)
• 403(b) Retirement Plan with Company Match
• Short-Term & Long-Term Disability
• $0 Copay for Legacy Provider visits
• $0 Copay for prescriptions filled at Legacy Pharmacies
• Travel Insurance & Pet Insurance
• Subsidized Gym Membership
• And much more!

Apply today in less than 3 minutes using your phone, tablet, or computer!

Location: Remote in Houston, Texas 

IT Governance and Compliance Analyst - Job Overview

Location: Legacy Montrose Allen Parkway - 2929 Allen Pkwy. Ste. 1300 Houston, TX 77019

At Legacy Community Health, we're more than just a healthcare organization; we're a family dedicated to making a meaningful impact in our communities. As an IT Governance and Compliance Analyst, you'll play a crucial role in supporting our governance, risk management, and compliance activities. Your passion for precision and collaboration will help us maintain high standards while fostering a supportive work environment.

• Role Highlights: Engage with cross-functional teams, ensuring alignment between regulatory and organizational requirements.
• Impact Opportunities: Contribute to the safety and security of our healthcare environment.
• Team Collaboration: Work closely with IT and business units to nurture a culture of accountability and excellence.
• Growth Prospects: Experience mentorship and professional advancement as a part of your journey here.

Essential Duties & Functions

• Governance & Documentation Control: Administer the IT documentation control process, ensuring documentation aligns with regulatory and compliance requirements.
• Third-Party Risk Management: Conduct third-party security reviews, collaborating with Supply Chain to evaluate cybersecurity risks during vendor onboarding.
• Compliance & Audit Coordination: Support compliance by maintaining evidence for unified controls, and coordinate audits and assessments.
• Risk Management: Facilitate the risk identification and documentation processes while managing risk acceptance processes.
• GRC Platform Administration: Maintain the GRC platform including updates, data integrity, and report generation.
• Actively participate in governance and compliance projects, collaborating with cross-functional teams.
• Be available for on-call duties as needed.
• Perform other duties as assigned.

Minimum Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, or related field, or equivalent experience.
• 2–5 years of experience in IT, security, compliance, audit, or risk management.
• Experience supporting audits, regulatory frameworks (e.g., HIPAA, NIST), or third-party risk management.
• Experience with GRC platforms or documentation/control processes.
• Relevant certifications such as CISA, CRISC, or equivalent.
• Strong critical thinking and analytical skills with the ability to assess risk and interpret compliance requirements.
• Ability to manage multiple deadlines, prioritize work, and maintain attention to detail in a deadline-driven environment.
• Strong organizational and documentation management skills.
• Effective written and verbal communication skills for coordinating across teams and external partners.
• Knowledge of governance, risk, and compliance principles and practices.
• Ability to collect, track, and validate compliance evidence and audit documentation.
• Ability to manage sensitive and confidential information with a high level of discretion.
• Proficiency with Microsoft Office and collaboration tools for documentation and tracking
• Experience with governance, risk, and compliance platforms.
• Experience with Microsoft environments.
• Experience supporting audits, assessments, or regulatory compliance frameworks (e.g., HIPAA, NIST).
• Experience with third-party risk management processes.
• Experience with ServiceNow or similar workflow/ticketing systems.
• Familiarity with security controls and technical security concepts.

About Legacy Community Health

With more than 50 clinics across the Greater Houston and Gulf Coast region, we continue to grow strategically and invest in our communities. By innovating how care is delivered, we've stayed at the forefront of connecting our communities to health—every day, in every way.

At Legacy, we know our success is powered by our people. We're always looking for talented, passionate individuals who want more than a job—they want a meaningful career that makes a real impact.

Explore our open positions and see if a career at Legacy is right for you.

Core Employee Expectations

At Legacy Community Health, our mission—Driving healthy change in our communities—guides everything we do. To fulfill this mission, every team member is expected to embody the following core attributes in their daily work, regardless of role or department:

Approachable & Collaborative

We bring our expertise without ego. In a collaborative healthcare environment, humility fosters trust and teamwork. Our employees value diverse perspectives, seek input from others, and are unafraid to acknowledge when they need help. We stay grounded in our purpose: to serve patients and communities with compassion and humility.

Driven & Committed

We are driven by a deep commitment to excellence in patient care and organizational improvement. Our employees take initiative, embrace challenges, and go the extra mile to support our mission. Whether improving patient outcomes, streamlining processes, or stepping up in times of need, we are always striving to drive healthy change—within ourselves, our teams, and the communities we serve.

Perceptive & Thoughtful Communicators

We value emotional intelligence as much as clinical or technical skill. Our team members demonstrate sound judgment, cultural sensitivity, and the ability to navigate complex situations with empathy and professionalism. They communicate clearly and respectfully with patients, families, and colleagues, building trust and fostering a safe, inclusive environment for all.