Information Risk Consultant

Highmark Health • Carson City, NV

416d

About The Position

The Information Security Risk Management position at Highmark Health is responsible for conducting risk assessments, ensuring compliance with security policies, and collaborating with various teams to mitigate risks. The role involves analyzing documentation, communicating findings, and developing security architecture solutions to protect the organization from potential threats. This position plays a crucial role in maintaining the integrity of information security practices and policies within the company.

Requirements

• Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field.
• 3 - 5 years' experience in Information Security and/or Information Risk Management and/or Information Technology.
• 1 - 3 years' experience within Information Security Governance, Risk and/or Compliance functions.
• 1 - 3 years' experience developing, communicating and presenting Information Security and Risk Management concepts.
• Familiarity with technologies such as IPS, firewalls, endpoint protection, DLP, SEIM, and virtualization platforms.

Nice To Haves

• Master's Degree in Computer Science, Information Security or related field.
• 5 - 7 years' experience in Information Security and/or Information Risk Management.
• Experience working within an information security function using HITRUST CSF or NIST 800-53.
• Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits.
• Governance Risk and Compliance (GRC) tool experience such as ARCHER.

Responsibilities

• Conduct Information Risk Assessments as assigned to the team.
• Request and analyze documentation necessary to perform appropriate assessment and conduct necessary interviews.
• Clearly and concisely document and communicate risk assessment results with requestor, security architects and management.
• Conduct and formulate appropriate risk scoring related to threat, vulnerability, likelihood, impact, security controls/counter-measures.
• Understand and contribute to inventory of risk register tracking, scoring and associated risk statements.
• Perform follow up activities related to exceptions, risk acceptance, corrective action plans and additional mitigation activities.
• Communicate risk treatment methodology to appropriate groups.
• Partner with multiple projects and initiatives to apply security architecture requirements and develop architecture solutions.
• Assist teams in developing and maintaining procedural documentation that meets compliance standards.
• Prepare and present solution decks to different levels of management.

Benefits

• Health insurance coverage
• Dental insurance coverage
• 401k retirement savings plan
• Paid holidays
• Flexible scheduling
• Professional development opportunities

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Insurance Carriers and Related Activities
• Education Level: Bachelor's degree