Principal Cybersecurity Risk Analyst

A healthcare organization in New Jersey is seeking a new Principal Cybersecurity Risk Analyst (PCSA) to lead project and technology-based risk assessments within the environment, lead technical and nontechnical third party risk assessments, and recommend mitigating action or controls.

Responsibilities:

• Lead third party vendor risk, project risk, or technology risk assessments.


• Lead ongoing security assessments to validate appropriate controls are in place


• Provide Information Security consulting and subject matter expertise on third party service contracts and/or Sourcing arrangements and internally to junior analysts.


• Lead the development and improvement of security processes, assist in metrics development, both within the technology and business organizations


• Lead cross-functional teams to serve as the facilitator between the Information Cyber Security Office and the broader organization


• Collaborate with internal ICSO teams to utilize expertise to identify evolving security threats and provide in-depth understanding of "if, how, and when" they should be addressed


• Lead the evaluation and assessment of supplier criticality and review changes in scale and scope of services contracted with supplier for material impact.


• Actively promote commitment to Information Security, Enterprise Risk Management and Audit initiatives, as well as its culture of compliance

Qualifications:

• 5+ years of experience in Risk Management with advanced understanding of Third-Party Risk Management


• High School Diploma / GED


• Third party, technology, and project risk assessment experience


• Experience with Governance, Risk, and Compliance tools


• Experience in Risk Management with advanced understanding of Third-Party Risk Management


• Solid understanding of IT security concepts with an emphasis on Security and Risk Assessment.


• Solid knowledge of IT and computer systems.


• Familiarity with HIPAA security rules and National Institute of Standards and Technology (NIST) standards


• familiarity with Vendor Risk Management


• Strong analytical thinking skills


• Excellent interpersonal skills and the ability to work effectively with others as a team

Desired Skills:

• Associate's and/or Bachelor's Degree


• Familiarity with ServiceNow tool