Information Security Risk Analyst - REMOTE

Remote • Posted 1 hour ago • Updated 1 hour ago
Contract W2
Contract Independent
Contract Corp To Corp
7 Months
No Travel Required
Remote
Depends on Experience
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • CISM
  • CISSP
  • Cryptography
  • Cyber Security
  • Operating Systems
  • SAP BASIS
  • Identity Management
  • Network Security
  • NIST 800-53

Summary

Job Description:

***Crop to Crop resumes are accepted

***This is an urgent vacant position. The manager has requested a shortened submission window due to the urgent requirement.

The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the North Carolina Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).

 

Required Knowledge, Skills, and Abilities

  • Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.
  • Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
  • Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
  • Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

 

Minimum Education and Experience

  • Bachelor’s degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR
  • Associate degree in Computer Science or a related IT field and three years of progressive experience; OR
  • An equivalent combination of education and experience
  • Required Qualifications
  • Professional certifications such as CISSP or CISM.
  • Experience performing NIST 800-53 based risk assessments.
  • Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework
  • Preferred Qualifications
  • Experience completing HITRUST risk assessments.

 

Required Skills:

Thorough knowledge of mainstream operating systems/security technologies inc: network security appliances/identity and access management/cryptography

Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37.

Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors

Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10121151
  • Position Id: NCDIT-ISRA1112
  • Posted 1 hour ago
Contact the job poster
Emily Koel

Emily Koel

Recruiter @ Chandra Technologies, Inc.

Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.