Security Specialist- Mid Level

Wiserhunt • Raleigh, NC

2d • Remote

About The Position

The Information Security Risk Analyst will perform an annual third-party risk assessment of a technical implementation vendor, using the North Carolina Statewide Information Security Manual as the assessment basis. Working with a lead analyst, the specialist will own delivery of the System and Data Inventory, Risk Registry, and Risk Assessment Report (RAR). This is identified as an urgent vacant position, with a shortened submission window.

The position is listed as remote and is scheduled to start November 30, 2026, with an assignment end date of June 30, 2027. The posting describes a mid-level role and lists typical experience as 36–60 months.

Requirements

• Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.
• Working knowledge of the IT security industry and federal and state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37.
• Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors.
• Ability to prioritize and summarize risk assessment status to project managers and executive leadership.
• Professional certification such as CISSP or CISM.
• Experience performing NIST 800-53-based risk assessments.
• Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework.
• One of the following education and experience combinations: a bachelor's degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; an associate degree in Computer Science or a related IT field and three years of progressive experience; or an equivalent combination of education and experience.
• The skills table lists five years of experience for knowledge of mainstream operating systems and security technologies, and three years for each of the other listed skill areas.

Nice To Haves

• Experience completing HITRUST risk assessments.

Responsibilities

• Perform an annual third-party risk assessment of a technical implementation vendor based on the North Carolina Statewide Information Security Manual.
• Work with a lead analyst to conduct the assessment.
• Own delivery of the System and Data Inventory, Risk Registry, and Risk Assessment Report (RAR).
• Conduct vendor interviews, evaluate evidence, and provide feedback to vendors.
• Prioritize and summarize risk assessment status for project managers and executive leadership.

What This Job Offers

• Career Level: Mid Level