Security Risk Assessor

Job Title: Security Risk Assessor

Location: Canton, MA
Job Type: Contract (Remote)

Job description:

• Providing advanced information security consultation for all aspects of information security, compliance, policy, risk management, and remediation
• Identifying process improvements and developing plans to meet or exceed security best practices
• Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories.
• Conduct risk assessments on various applications, systems, infrastructure, cloud-environments, and third-party arrangements.  Document identified risk through a risk report to be effectively communicated shared with business and/or technical leadership
• Confidently represent the Cyber & Information Security risk assessment services function with reviewing and assessing contracts, application designs, integration plans, etc.
• Create documentation in support of the risk assessment services team
• Self-directed; expected to identify and lead efforts to correct security controls and/or process improvements
• Explain complex technical issues to non-technical colleagues and business executives
• Troubleshoot and independently solve problems as they arise

Basic Qualifications:

• (what are the skills required to this job with minimum years of experience on each)
• Min 5+ year of experience in at least 4 of these or similar disciplines: IT governance and operations; access control analysis; incident response; data analysis and auditing controls; data protection; advance threat protection; identity and access management; integrated technologies with cross-functional impact
• Minimum 5+ year of experience with risk assessment frameworks
• Broad knowledge of commonly used information security concepts, best practices, and standard
• Strong collaboration, facilitation, and negotiation skills.
• Strong communication skills, both written and verbal.
• Familiarity with HIPAA Security Rule and other regulatory requirements
• Proven analytical and problem-solving abilities
• Project and program management planning and organizational skills
• Customer service focused
• Time management and prioritization

Nice to Have.

• Hands on Experience on Hands on Security Tools