Information Security Risk Analyst - Senior (REMOTE)
Information Security Risk Analyst - Senior (REMOTE)
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Location: Raleigh NC
Duration: 12 Months
Job Description:
- The Client is seeking a skilled Information Security Risk Analyst on a contract basis to lead the execution of its annual enterprise security risk assessment.
- This engagement ensures compliance with industrystandard frameworks supports proactive risk mitigation & positions the client for future HITRUST certification. Plan and conduct the client annual enterprise security risk assessment using NIST SP 80030 ISO 27005 or FAIR methodologies.
- Ensure full alignment with NIST SP 80053 Revision 5 including: RA (Risk Assessment) AC (Access Control) SC (System Communications Protection) IR (Incident Response) and more.
- Incorporate NIST Privacy Framework and NIST SP 80053 Rev. 5 privacy control families (AP AR DI DM IP SE TR UL).
- Build and maintain a comprehensive risk register with treatment plans for mitigation transfer acceptance or avoidance.
- Map risks and mitigation efforts to HITRUST CSF control domains to support future certification
- Develop and deliver documentation dashboards and executive summaries.
- Collaborate with internal stakeholders to validate findings and support security governance efforts.
Skills:
Required Experience:
Senior IC
Employment Type
Contract
