Our client, a Healthcare Insurance organization, is seeking a Cyber Security Risk Analyst to ensure the organization's data remains protected from inappropriate access, disclosure and/or damage buy assessing, documenting, and socializing risk.
ESSENTIAL FUNCTIONS:
- 25% Develop/Enhance companywide security best practices.
- 25% Research information security improvements and brief management.
- 25% Remain up to date on Information Security trends and emergent threats.
- 25% Assess, plan, and execute security measures in a layered approach to protect the organization.
Required Skills
- Education Level: Bachelor's Degree in Computer Science, Cyber Security, Information Technology, or related field is required. .
- Experience: 5+ years of relevant cyber security experience, specifically in Risk Management.
- Significant understanding of NIST Risk Management Framework and Information Security Risk Management methodologies including FAIR quantitative model
- Ability to understand, develop, and socialize security policies, standards, and procedures.
- Knowledge of HIPPA / PHI security standards
- Knowledge of cyber security related risk management techniques is required
- Knowledge of network architecture and firewall security
- Understanding of business needs and commitment to delivering high-quality, prompt, and efficient service
• * Preferred **
- Experience with Cybersecurity Governance, Risk, and Compliance (eGRC) Programs and Platforms such as Hyper Proof, Archer or ServiceNow GRC
- Any cyber security related certification
- SOC Reporting / Hitrust knowledge
-Diverse background in off-prem (cloud) platforms
-Experience within the healthcare insurance/payor industry
- AI Risk Assessments