Role OverviewCyber Security Analyst (GRC) will support the Cybersecurity Risk Management program, guiding a diverse technical team and collaborating across risk-related teams. The role involves assessing cybersecurity controls, identifying gaps, and managing mitigation strategies to closure.
What You Will Do
Key responsibilities include partnering with TPRM, Procurement, Legal, and business stakeholders on continuous monitoring efforts, conducting risk assessments, preparing detailed risk assessment reports, and maintaining a comprehensive repository of documentation.
Why It Might Be a Fit
The ideal candidate will have one or more certifications, a strong understanding of NIST Risk Management Framework and FAIR quantitative model, and experience with eGRC platforms. Experience within the healthcare insurance/payor industry is a plus.
Requirements
- One or more certifications: CISSP, CEH, CTIA, CAP, or EnCase Certified Examiner
- Bachelor's Degree in Computer Science, Cyber Security, IT, or related field (or 4 additional years of experience in lieu of degree)
- 5+ years of cybersecurity experience, specifically in Risk Management, with 3rd party/supplier risk assessment knowledge
- Experience with eGRC platforms (HyperProof, Archer, or ServiceNow GRC)
- Strong understanding of NIST Risk Management Framework and FAIR quantitative model
- Ability to develop and socialize security policies, standards, and procedures
- Knowledge of HIPAA/PHI security standards and network/firewall architecture
]]>