EITS Security Risk Analyst

Remote • Posted 16 hours ago • Updated 16 hours ago

Full Time

No Travel Required

Remote

Depends on Experience

Fitment

Dice Job Match Score™

👤 Reviewing your profile...

Job Details

Skills

etis
security
risk

Summary

Hi

Hope you are doing good.!

Position: EITS Security Risk Analyst
Location: 100% Remote

Principal Duties: Job Summary

The EITS Security Vulnerability Management Analyst will perform vulnerability scans, assess vulnerabilities identified and prioritize their remediation; help review and enhance the current vulnerability management program. This position will interface between various Information Technology teams and this individual must be able to articulate the vulnerabilities and remediations to the stakeholders. Additionally this individual should also be able to translate the IT security requirements and constraints of the business into technical control requirements and specifications, help in coordinating the IT organization's technical activities to implement and manage security.

PREFERRED QUALIFICATIONS FOR THE JOB:
CERTIFICATION(S)/NYS LICENSE(S):
EDUCATIONAL LEVEL:
A bachelor's degree in information systems
CISSP, CISM, GSEC, CEH, or other relevant security qualification
KNOWLEDGEABLE IN:

Experience with vulnerability scanning tools, preferably Rapid7
Experience with vulnerability and patch assessment
Strong knowledge of vulnerability scoring systems (CVSS/CMSS), and security frameworks like OWASP (Open Web Application Security Project), MITRE ATT&CK
Good understanding of Windows and Linux patching
Excellent writing and communication skills in order to communicate findings and remediation status
Knowledge of network and operating system security
Knowledge of encryption algorithms, known vulnerabilities from alerts, advisories, errata and bulletins
Utilize/understand the use of open source tools such as Nmap, Shodan, and Metasploit to identify and confirm vulnerabilities and attack surface
Strong Knowledge of infrastructure, application and security protocols in addition to configuration management techniques
Knowledge of network security architecture concepts, including topology, protocols, components, principles (e.g. application of defense-in-depth), and traffic flows across the network (e.g. TCP & TCP/IP, OSI, etc.)
Experience working with network access, identity, and access management (e.g. Active Directory, access federation, multifactor authentication, PKI)
Experience working with operating systems (Microsoft Windows, Linux, UNIX, etc)

YEARS OF EXPERIENCE:

A minimum of ten years of IT experience, with at least 7 years dedicated to IT/Cyber Security, including Solution Design

Responsibilities Will Include:

Support Information Security and Risk Management by maintaining and enforcing the Information Security and risk management framework/methodology, including execution of risk analysis and risk mitigation strategies.
Manage the process of gathering, analyzing and assessing the current and future threat landscape, as well as providing the CISO with a realistic overview of risks and threats in the enterprise environment.
Exhibit best practice risk management skills through effective internal risk controls, risk monitoring, risk assessment and improvement of risk management processes.
Document and maintain the enterprise security risk governance methodology and risk management policy, process, and procedure.
Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation.
Organize and perform the enterprise security risk assessment and gap analysis for all technologies, products, and functions introduced, including maintaining risk project work plans to measure and manage progress.
Track and document all internal risk reviews, assessments, risk acceptances, and security exceptions in a GRC tool.
Work with the enterprise architecture team to ensure that there is a convergence of business, technical and
security requirements; liaise with IT management to align existing technical installed base and skills with future architectural requirements.
Develop a strong working relationship with the security engineering team to develop and implement controls and configurations aligned with security policies and legal, regulatory and audit requirements
Serve as the information security liaison and subject matter expert for all relevant EMR and PHI related security risk.
Conduct or participate in all relevant audits and risk assessment activities (whether operational risk, legal/compliance risk, reputational risk, or information security risk).
Aid in the planning and execution of risk remediation activities including the identification of practical, cost effective solutions.
Facilitate team meetings between stakeholders, project leaders, and the Information Technology teams.
Attend regular team, management, and project meetings and provide both verbal and written reports to the Leadership Team as required. This may include coordination with and support of an Operational Risk Committee.
Keep informed on current threats and industry regulations.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 90773860
Position Id: 8892520
Posted 16 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

EITS Security Risk Analyst

Dice Job Match Score™

Job Details

Skills

Summary

Similar Jobs