Security Risk Analyst

Job Summary

Designing, implementing, and monitoring IT controls for core applications and systems, the full-time remote Security Risk Analyst will assess security risks, recommend controls to protect sensitive data, and prepare reports for stakeholders.

Key responsibilities:

• Conduct risk assessments of IT systems and processes, emphasizing cybersecurity risks and compliance with frameworks such as HIPAA and NIST
• Design and evaluate controls for effectiveness and efficiency based on the organization's defined risk appetite
• Prepare reports on identified risks and recommended controls, and interact with business owners for process improvement

Required qualifications:

• Bachelor's degree in IT, MIS, Accounting, Finance, Business Administration, or related field
• 3+ years of combined auditing and IT controls design experience
• Knowledge of IT systems and experience evaluating internal technical control systems
• Preferred certifications include CISSP, CRISC, CISA, CISM, FAIR, CPA, or CIA