Recently postedAdministrative

Security Risk Analyst

HonorVet TechnologiesUnited States🇺🇸United States

Quick overview

SeniorityMid Senior

Work modeHybrid

LocationUnited States

Job description

HonorVet Technologies is a Service-Disabled Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring.
Job Title: Security Risk Analyst
Location: Remote
Duration: 07 Months
Job Description:
The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).
Required Skills/Experience:

5 years of Thorough knowledge of mainstream operating systems/security technologies, including network security appliances/identity and access management/cryptography.
3 years of Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
3 years of Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
3 years of Ability to prioritize and summarize risk assessment status to project managers and executive leadership.
Professional certifications such as CISSP or CISM.
Experience performing NIST 800-53 based risk assessments.
Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework

Minimum Education/Experience:

Bachelor’s degree in computer science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR Associate degree in Computer Science or a related IT field and three years of progressive experience; OR An equivalent combination of education and experience.