Senior Information Security Risk Analyst

🔥 1 hour ago

🎸 Tennessee – Remote

🎸 Tennessee – Remote

⏰ Full Time

🟠 Senior

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

BlueCross BlueShield of Tennessee

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1952

🏥 Healthcare

💼 Consulting

🛡️ Insurance

Healthcare • Consulting • Insurance

BlueCross BlueShield of Tennessee is a leading health plan provider in Tennessee, serving 3. 4 million members. The company is committed to creating a workforce where everyone is valued, respected, and part of the team, emphasizing diversity and inclusion. They offer a range of career opportunities, including internships through their BlueBridge program, enabling new professionals to transition from college to work. BlueCross BlueShield of Tennessee also focuses on providing exceptional customer service and community care, striving to make a difference in the healthcare industry. It is an independent licensee of the Blue Cross Blue Shield Association and a qualified health plan issuer in the Health Insurance Marketplace.

📋 Description

• Serve as a technical subject matter expert in application security risk management • Lead governance and oversight of the SAST/DAST application security scanning program • Assess security vulnerabilities and evaluate application and infrastructure scanning findings • Partner with application teams, incident management teams, and business stakeholders to prioritize and remediate risk • Maximize the value of the SAST/DAST platform and strengthen vulnerability management practices • Improve risk visibility and translate technical findings into actionable business risk insights • Support a high-visibility Data Governance initiative • Partner with business leaders, data owners, security, privacy, compliance, and technology teams • Establish governance standards, assess risk, monitor compliance, and strengthen data stewardship practices • Coordinate SOC 2 audit activities, including evidence collection, control validation, and auditor engagement • Maintain control documentation, mappings, and narratives • Oversee audit findings, remediation efforts, and issue closure • Create and update NIST System Security Plans (SSPs) • Design and manage security awareness training initiatives, phishing simulations, and targeted campaigns • Manage the lifecycle of security policies, standards, and procedures • Perform enterprise and third-party risk assessments, maintain risk registers, execute vendor risk assessments, and monitor remediation • Track vulnerability remediation against SLAs • Respond to RFPs and security questionnaires • Support initiatives across GRC areas and foster collaboration and shared accountability

🎯 Requirements

• Bachelor’s degree in a relevant field or an equivalent of four years of experience is required • 5 years of professional experience in Information Security or related IT roles with security-related responsibilities • At least 2 years focused on Governance, Risk, and Compliance (GRC) functions • Experience leveraging AI-enabled tools to automate and enhance GRC processes preferred • One or more of CISSP, CRISC, CISA, or CISM certifications preferred • Ability to assess and document organizational risks, identify impacts, and recommend mitigation strategies • Ability to interpret and apply regulatory requirements and industry frameworks, including NIST, SOC 2, and HIPAA • Ability to analyze security, compliance, and risk metrics • Ability to communicate complex risk and compliance concepts to technical and non-technical stakeholders • Ability to collaborate across cross-functional teams • Exceptional time management skills • Excellent oral and written communication skills • Strong interpersonal and relationship-building skills • Ability to work with all levels of staff and management • Must be able to work Eastern Time business hours • Participation in on-call rotation is required for two weeks every 22 weeks • Sponsorship is not available for this role

🏖️ Benefits

• Remote, work-from-home position • Employee worker type • Opportunity to influence enterprise-wide decisions and advance a mature Data Governance program