Massachusetts Licensed Information Risk Analyst

Job Summary

Serving as a key member of the Information Risk Management team, the full-time Massachusetts Licensed Information Risk Analyst will evaluate technology risk postures, conduct vendor risk assessments, and translate complex technical threats into actionable business insights, with opportunities for both onsite and remote work.

Key responsibilities

• Perform vendor risk assessments to identify and communicate risks aligned with organizational requirements
• Function as a technology risk subject matter expert, executing comprehensive technology risk assessments across various applications and initiatives
• Partner with Legal and Procurement teams to guide negotiations on contract language and risk mitigation strategies

Required qualifications

• BA or BS degree in Risk Management, Technology, Business Administration, Information Security, or a related field
• 8+ years of experience in third-party risk management or technology risk functions
• 5+ years of experience executing risk assessments within an information protection framework
• CRISC, CTPRP, or C3PRMP certification strongly preferred
• Experience with healthcare regulatory frameworks, specifically HIPAA and HITRUST