Information Security Risk Analyst - Remote / Telecommute

Job Title: Information Security Risk Analyst - Remote / Telecommute

Job Location: Raleigh, NC

Job Type: Contract

Pay Range: $70.00hr - $75.00hr

Job Overview:

The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the state s Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, and a Risk Assessment Report (RAR).

Required Knowledge, Skills, and Abilities:

• Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.
• Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37.
• Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors.
• Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

Minimum Education and Experience:

• Bachelor s degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR.
• Associate degree in Computer Science or a related IT field and three years of progressive experience; OR.
• An equivalent combination of education and experience.

Required Qualifications:

• Professional certifications such as CISSP or CISM.
• Experience performing NIST 800-53-based risk assessments.
• Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework.

Preferred Qualifications:

• Experience completing HITRUST risk assessments.

== ==

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA)
• Disability Insurance (Short-Term and Long-Term)
• Life and AD&D Insurance
• Paid Sick Leave (where required by applicable state or local law)
• Supplemental Insurance Plans
• Identity Theft Protection
• Pet Insurance
• Employee Wellness Programs
• Employee Assistance Program (EAP)
• Career Growth and Professional Development Opportunities