Lead Risk Analyst (NIST)

Position Purpose:

Leads with the overall enterprise-wide effectiveness and efficiency of the organization''s IT security and risk activities by ensuring that high levels of security and risk analysis are maintained. Supports regulatory compliance efforts and supports designing of the information technology environment leveraging industry best practices for best-in-class security and appropriate risk mitigation.  

Education/Experience:

A Bachelor''s degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and requires 5 – 7 years of related experience.

Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.

Technical Skills:

One or more of the following skills are desired.

Knowledge of Other: 27001, HIPAA, Sarbanes-Oxley Act, PCI-DSS and other related state requirements

Soft Skills:

Intermediate - Seeks to acquire knowledge in area of specialty

Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions

Intermediate - Ability to work independently

Intermediate - Demonstrated analytical skills

Intermediate - Demonstrated project management skills

Intermediate - Demonstrates a high level of accuracy, even under pressure

Intermediate - Demonstrates excellent judgment and decision making skills

Intermediate - Ability to communicate and make recommendations to upper management

Intermediate - Ability to drive multiple projects to successful completion

Intermediate - Possesses technical aptitude

License/Certification:

Certified Information Systems Auditor (CISA)  preferred

Education/Certification Required: Bachelor’s Degree Preferred: 

Years of experience required: 7

Disqualifiers: Inability to articulate in detail will disqualify, Inability to communicate very clearly in easy to understand and follow terms will disqualify, We are not looking for buzzwords on a resume but substance in the projects that show leadership, Not looking for a task doer, must have analytical skills because we cannot provide direction on everything. 

Additional qualities to look for: Friendly demeanor

• Top 3 must-have hard skills stack-ranked by importance

1 Experience with NIST

2 Experience with SOC 2

3 Project Leadership