Likeremote

Subscribe to the latest remote jobs:

  • Likeremote jobs on https://LinkedIn.com/
  • Likeremote jobs on https://telegram.org/
  • Likeremote jobs on Reddit.com
AG

Sr IT Security Risk Management Analyst | Remote

ARC Group
  • 🇺🇸 United States
  • Remote
  • Senior
  • 3 days ago
  • Risk Management
  • NIST
  • HIPAA
  • FISMA
  • CMS
  • Configuration Management
  • Archer
  • FedRAMP
  • Sarbanes-Oxley
  • SOX
  • CIS Benchmarks
  • MS Office
  • Microsoft Project
  • Visio
  • CISA
  • CISSP
  • CRISC
  • CISM
3 days ago
Auto apply with Likeremote
Not scoredNo CV on file. Upload one and this job gets a score out of 100.Upload CV
SR IT SECURITY RISK MANAGEMENT ANALYST | REMOTE
ARC Group has an immediate opportunity for a Sr IT Risk Management Analyst! This is direct hire FTE position with a stable and well-respected healthcare organization based in Jacksonville, FL. This is a remote position working Eastern time zone business hours. This is a fantastic opportunity to join a well-respected organization offering tremendous career growth potential.
 
At ARC Group, we are committed to fostering a diverse and inclusive workplace where everyone feels valued and respected. We believe that diverse perspectives lead to better innovation and problem-solving. As an organization, we embrace diversity in all its forms and encourage individuals from underrepresented groups to apply.
 
100% REMOTE!
 
Candidates must currently have PERMANENT US work authorization.  Sorry, but we are not considering any candidates from outside companies for this position (no C2C, 3rd party / brokering).
 
The Senior IT Security Risk Management Analyst is responsible for translating industry, government and business compliance requirements (Defense Information Systems Agency (DISA), National Institute of Standards and Technology (NIST), Health Information Portability and Accountability Act (HIPAA), Federal Information Security Act ( FISMA), Centers of Medicare and Medicaid (CMS), Cybersecurity Framework (CSF), Health and Human Services (HHS and National Archives Records Administration (NARA)), into IT Security and Risk Management frameworks, policies, standards and best practices. The incumbent leads efforts, coordinates and oversees the remediation of non-compliant areas across all the company's lines of business and IT departments including HR, Risk Management, Internal Audit, Legal, Operations, IT, Security and Privacy teams.

Primary Duties: (80%)
  • Monitor third party/vendor security posture and information security risk.
  • Perform vendor security assessment activities including evaluation of vendor controls and practices, process enhancements, including onsite assessments as applicable.
  • Perform information security risk assessments on identified IT issues raised by IT and business partners, as needed.
  • Communicate and track remediation plans with vendors, business, and IT partners and where applicable, recommend mitigating/compensating controls
  • Work to ensure that security controls are managed and maintained by business and IT partners in line with Information Security company policies, standards, federal and state security, and data privacy laws.
  • Develop and maintain information security procedures.
  • Track Plan of Action and Milestone (POAM) remediation plans with business and IT partners.
  • Participate in IT projects to identify technical and operational information security controls to ensure that security issues are addressed throughout the project life cycle, as needed.
  • Maintain security risk metrics to promote transparency across the organization.
  • Maintain Information Security Risk Management and Compliance data repositories.
  • Participate in DISA STIG configuration management compliance reviews.
Relationships and Collaboration: (20%)
  • Interact and manage relationships with IT business partners, with CMS, data centers, internal customers, and other business partners to meet contractual obligations for compliance deliverables.
  • Provide training and technical guidance to less senior staff, where appropriate, and serves as point-of-contact for problem resolution.
  • Share information and perform necessary follow-up to ensure stakeholders are well informed.
Required Qualifications:
  • High School Diploma or GED
  • 5 years' related work experience. This includes experience coordinating efforts between IT and external audit firms to assist in scheduling, resource planning, and remediation efforts and experience using GRC tools and technologies in support of the assessment/audit process (RSA Archer, Service Now, Logic Manager, Navex, etc.)
  • Understanding and knowledge of current control and risk management concepts and industry trends in information risk management, including privacy laws
  • Strong understanding of information security risk management and controls frameworks (i.e., International Organization for Standardization (ISO) 2700; Federal Risk and Authorization Management Program (FedRAMP), Sarbanes Oxley (SOX), NIST, CSF, DISA, Center for Internet Security (CIS) Benchmarks)
  • Knowledgeable in compliance requirements such as HIPAA, NIST, HHS, NARA
  • Proficient in MS Office applications: Microsoft Project, Microsoft VISIO
  • Strong critical thinking skills to identify issues and problems, generate solutions and choose appropriate solutions that are consistent with business objectives and strategy
  • Proven ability to work under stress in emergencies with flexibility to handle multiple high-pressure situations
  • Ability to manage individual deadlines and goals and to take ownership of responsibilities
  • Ability to learn from mistakes and apply root cause analysis to improve performance
  • Ability to handle multiple competing priorities in a fast-paced environment
  • Ability to deal effectively with internal and external regulatory agencies/teams
  • Strong team-oriented interpersonal skills to work with technical and non-technical business owners to develop control solutions
  • Demonstrated initiative and effective independent decision-making skills.

CERTIFICATIONS, LICENSES, REGISTRATIONS
  • Possesses or obtains within 1 year of position placement: Certified Information Systems Auditor (CISA)
Or
  • Possesses or obtains within 2 years of position placement: Certified Information System Security Professional (CISSP)

Preferred Qualifications
  • Bachelor's degree in related field
  • 5 years of experience in IT, Information Security, Cyber Risk Management, Compliance, or equivalent combination of transferable experience and education
  • Certified in Risk and Information Systems Controls (CRISC)
  • Possesses or obtains within 2 years of position placement: Certified Information Security Manager (CISM)

Would you like to know more about our new opportunity?For immediate consideration, please send your resume directly to John Burke atjohnb@arcgonline.com or apply online while viewing all of our open positions atwww.arcgonline.com.

ARC Group is a Forbes-ranked a top 20 recruiting and executive search firm working with clients nationwide to recruit the highest quality technical resources. We have achieved this by understanding both our candidate's and client's needs and goals and serving both with integrity and a shared desire to succeed.

At ARC Group, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status. If you require accommodations during the recruitment process, please let us know.
 
Position is offered with no fee to candidate.

Sr IT Security Risk Management Analyst | Remote · ARC Group

Auto apply with Likeremote