Cyber Security Risk Assessor

Cyber Security Risk Assessor

Contract

Location: Maplewood, MN Local preferred

Skills:

1. Cyber Security Risk Assessor
2. GDPR, HIPAA, NIST, and ISO 27001
3. CISSP, CISM, CRISC
4. Cyber security principles, frameworks, and best practices.
5. Risk assessment methodologies and tools.

We are seeking a highly skilled and experienced Cyber Security Risk Assessor to join our Information Security team.

The ideal candidate will be responsible for identifying, analyzing, and mitigating cyber security risks across the organization.

This role involves working closely with various departments to ensure that our cyber security measures are robust and effective in protecting our assets and data.

Key Responsibilities:

Conduct comprehensive risk assessments to identify potential cyber security threats and vulnerabilities within the organization.

Develop and implement risk management strategies to mitigate identified risks.

Collaborate with IT and other departments to ensure that security controls are in place and effective.

Monitor and analyze security incidents to identify trends and recommend improvements.

Prepare detailed reports and presentations on risk assessment findings and recommendations for senior management.

Stay up-to-date with the latest cyber security threats, trends, and technologies.

Provide guidance and training to employees on cyber security best practices and risk management.

Assist in the development and maintenance of cyber security policies, procedures, and standards.

Participate in internal and external audits and assessments related to cyber security.

Ensure compliance with relevant regulations and industry standards.

Skills:

Minimum of 5 years of experience in cyber security risk assessment or a related field.

Strong understanding of cyber security principles, frameworks, and best practices.

Experience with risk assessment methodologies and tools.

Excellent analytical and problem-solving skills.

Strong communication and interpersonal skills.

Ability to work independently and as part of a team.

Knowledge of relevant regulations and standards such as GDPR, HIPAA, NIST, and ISO 27001.

Education:

Bachelor's degree in Cyber Security, Information Technology, Computer Science, or a related field.

Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable.