Security Risk Assessor

Day to Day job Duties: (what this person will do on a daily/weekly basis)

•            Providing advanced information security consultation for all aspects of information security, compliance, policy, risk management, and remediation

•            Identifying process improvements and developing plans to meet or exceed security best practices

•            Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories.

•            Conduct risk assessments on various applications, systems, infrastructure, cloud-environments, and third-party arrangements.  Document identified risk through a risk report to be effectively communicated shared with business and/or technical leadership

•            Confidently represent the Cyber & Information Security risk assessment services function with reviewing and assessing contracts, application designs, integration plans, etc.

•            Create documentation in support of the risk assessment services team

•            Self-directed; expected to identify and lead efforts to correct security controls and/or process improvements

•            Explain complex technical issues to non-technical colleagues and business executives

•            Troubleshoot and independently solve problems as they arise

Basic Qualifications: (what are the skills required to this job with minimum years of experience on each)

•            Min 5+ year of experience in at least 4 of these or similar disciplines: IT governance and operations; access control analysis; incident response; data analysis and auditing controls; data protection; advance threat protection; identity and access management; integrated technologies with cross-functional impact

•            Minimum 5+ year of experience with risk assessment frameworks

•            Broad knowledge of commonly used information security concepts, best practices, and standard

•            Strong collaboration, facilitation, and negotiation skills.

•            Strong communication skills, both written and verbal.

•            Familiarity with HIPAA Security Rule and other regulatory requirements

•            Proven analytical and problem-solving abilities

•            Project and program management planning and organizational skills

•            Customer service focused

•            Time management and prioritization