Information Security Risk Analyst
Job Title: Security Risk Assessor
Location: Canton, MA (Remote)
Visa Requirement: W2 candidates with at least 12 months of visa validity Interview Mode: Microsoft TeamsMust-Have Skills Security Risk AssessmentHIPAA Security RuleJob Responsibilities Provide advanced information security consultation across information security, compliance, policy, risk management, and remediation. Identify process improvements and develop plans to meet or exceed security best practices. Ensure the confidentiality, integrity, and availability of information residing on or transmitted to, from, or through enterprise devices, servers, systems, and data repositories. Conduct risk assessments across applications, systems, infrastructure, cloud environments, and third-party arrangements. Document identified risks in comprehensive risk reports and effectively communicate findings to business and technical leadership. Represent the Cyber & Information Security Risk Assessment Services function in reviewing and assessing contracts, application designs, integration plans, and related documentation. Create and maintain documentation to support the Risk Assessment Services team. Independently identify and lead initiatives to remediate security control gaps and improve processes. Explain complex technical issues clearly to non-technical colleagues and business executives. Troubleshoot issues and independently develop and implement effective solutions.
Basic Qualifications:
Minimum 5+ years of experience in at least four of the following or similar disciplines:
- IT Governance and Operations
- Access Control Analysis
- Incident Response
- Data Analysis and Auditing Controls
- Data Protection
- Advanced Threat Protection
- Identity and Access Management (IAM)
- Integrated Technologies with Cross-Functional Impact
- Minimum 5+ years of experience working with risk assessment frameworks.
- Broad knowledge of commonly used information security concepts, best practices, and standards.
- Familiarity with the HIPAA Security Rule and other regulatory requirements.
- Strong collaboration, facilitation, and negotiation skills.
- Excellent written and verbal communication skills.
- Proven analytical, troubleshooting, and problem-solving abilities.
- Strong project and program management, planning, and organizational skills.
- Customer service-oriented approach.
- Effective time management and prioritization skills.
Nice-to-Have Qualifications: Hands-on experience with security tools.