NIST Security Risk Analyst

Job Title: Security Risk Analyst
Location: Raleigh , NC

Role : 100% Remote
Duration : 12 Months

Job Description: The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).
 
Required Skills/Experience:
•   5 years of Thorough knowledge of mainstream operating systems/security technologies, including network security appliances/identity and access management/cryptography.
•   3 years of Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
•   3 years of Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
•   3 years of Ability to prioritize and summarize risk assessment status to project managers and executive leadership.
•   Professional certifications such as CISSP or CISM.
•   Experience performing NIST 800-53 based risk assessments.
•   Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework