Security Risk Management Analyst

CVS Health • Richardson, TX

403d • $72,100 - $158,620

About The Position

This position is responsible for conducting comprehensive security risk assessments for new and existing technologies at CVS Health. The role focuses on identifying, analyzing, and mitigating security risks to ensure compliance with information security standards, facilitating a secure integration of technologies. The individual will collaborate with various stakeholders, including project managers and technical teams, to communicate security issues in understandable terms while leading small teams and mentoring junior members.

Requirements

• 2+ years of information security experience.
• 2+ years working knowledge of common security frameworks and regulations, including NIST 800-53, ISO 27001/2, HIPAA/HITECH, HITRUST, and PCI-DSS.
• 2+ years working knowledge of Information Technology including Cloud, access management, architecture, infrastructure, operating systems, application/software development, and endpoint security.

Nice To Haves

• Industry related certification such as CISSP, CISM, CRISC, etc.
• Ability to comprehend implications of security risk, compensating controls, etc.
• Solid written and verbal communication skills.
• Demonstrated critical thinking and knowledge of risk management processes, tools, and techniques.
• Experience operating in applications including Archer, Qualys, Checkmarx, and Prisma.
• Solid knowledge of Information Security policies and procedures.
• Knowledge of current security threat and vulnerability trends.
• Understanding of cloud Security best practices and frameworks.

Responsibilities

• Conduct thorough security risk assessments for new technologies before deployment and for existing technologies post-deployment.
• Identify, assess, and analyze security risks and potential vulnerabilities.
• Provide risk mitigation strategies to ensure compliance with information security standards.
• Engage with project managers, developers, architects, and infrastructure engineers as needed.
• Communicate technical issues to business partners and senior leaders in clear, understandable terms.
• Lead small teams and mentor junior team members.
• Oversee third-party contractors and respond to critical requests.

Benefits

• Medical, dental, and vision benefits.
• 401(k) retirement savings plan.
• Employee Stock Purchase Plan.
• Fully-paid term life insurance plan.
• Short-term and long-term disability benefits.
• Well-being programs.
• Education assistance and free development courses.
• CVS store discount and discount programs with partners.
• Paid Time Off (PTO) and paid holidays.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Health and Personal Care Retailers
• Education Level: Bachelor's degree