Risk Assessment Professional

APPLY TO THIS JOB

Duties and Responsibilities:
• Providing advanced information security consultation for all aspects of information security, compliance, policy, risk management, and remediation
• Identifying process improvements and developing plans to meet or exceed security best practices.
• Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories.
• Conduct risk assessments on various applications, systems, infrastructure, cloud-environments, and third-party arrangements. Document identified risk through a risk report to be effectively communicated with business and/or technical leadership.
• Confidently represent the Cyber & Information Security risk assessment services function with reviewing and assessing contracts, application designs, integration plans, etc.
• Create documentation in support of the risk assessment services team.

Desired Skills and Experience:
• Broad knowledge of commonly used information security concepts, best practices, and standards
• Self-directed; expected to identify and lead efforts to correct security controls and/or process improvements.
• Experience with at least 4 of these and similar disciplines: IT governance and operations; access control analysis; incident response; data analysis and auditing controls; data protection; advance threat protection; identity and access management; integrated technologies with cross-functional impact
• Strong collaboration, facilitation, and negotiation skills.
• Strong communication skills, both written and verbal.
• Ability to explain complex technical issues to non-technical colleagues and business executives.
• Ability to troubleshoot and independently solve problems as they arise.
• Familiarity with HIPAA Security Rule and other regulatory requirements
• Proven analytical and problem-solving abilities.
• Project and program management planning and organizational skills
• Customer service focused.
• Time management and prioritization