Information Security Risk Analyst

Job Summary

To enhance the organization's information security risk management program, the full-time remote Information Security Risk Analyst - Intermediate will independently conduct risk analysis, manage risk treatment plans, and ensure compliance with HIPAA and NIST regulations.

Key responsibilities

• Lead and conduct comprehensive information security risk analysis for IT assets, applications, and third-party vendors
• Evaluate threats and vulnerabilities to ensure alignment with regulatory frameworks and maintain the organization's risk register
• Collaborate with stakeholders to prioritize and implement remediation efforts while monitoring regulatory changes and emerging risks

Required qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; master's degree preferred
• 3+ years of experience in cybersecurity, information security risk management, or audit, with healthcare industry experience preferred
• Demonstrated experience with risk assessment methodologies and familiarity with risk management platforms
• Strong understanding of regulatory compliance related to HIPAA and NIST standards
• One or more relevant certifications (CRISC, CISM, CISA) required or must be obtained within 12 months of hire