Security Risk Assessor

Job Title: Security Risk Assessor Location: Canton, MA (Remote) Job Description:HM Notes: They want candidates with a strong balance of Security Architecture + Risk Assessment experience. Prioritize Security Architects with hands-on risk assessment, or Risk Assessors with CISSP/CCSP and AWS/Azure/GCP security certifications. Candidates with only strong risk assessment but limited technical security/architecture exposure should be avoided.Day to Day job Duties: (what this person will do on a daily/weekly basis)Providing advanced information security consultation for all aspects of information security, compliance, policy, risk management, and remediationIdentifying process improvements and developing plans to meet or exceed security best practicesEnsure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories.Conduct risk assessments on various applications, systems, infrastructure, cloud-environments, and third-party arrangements. Document identified risk through a risk report to be effectively communicated shared with business and/or technical leadershipConfidently represent the Cyber & Information Security risk assessment services function with reviewing and assessing contracts, application designs, integration plans, etc.Create documentation in support of the risk assessment services teamSelf-directed; expected to identify and lead efforts to correct security controls and/or process improvementsExplain complex technical issues to non-technical colleagues and business executivesTroubleshoot and independently solve problems as they ariseBasic Qualifications: (what are the skills required to this job with minimum years of experience on each)Min 5+ year of experience in at least 4 of these or similar disciplines: IT governance and operations; access control analysis; incident response; data analysis and auditing controls; data protection; advance threat protection; identity and access management; integrated technologies with cross-functional impactMinimum 5+ year of experience with risk assessment frameworksBroad knowledge of commonly used information security concepts, best practices, and standardStrong collaboration, facilitation, and negotiation skills.Strong communication skills, both written and verbal.Familiarity with HIPAA Security Rule and other regulatory requirementsProven analytical and problem-solving abilitiesProject and program management planning and organizational skillsCustomer service focusedTime management and prioritizationNice to Have; (But not a must)Hands on Experience on Hands on Security Tools