Information Risk Consultant

🔥 38 minutes ago

⚜️ Louisiana, North Carolina, +3 more states – Remote

⚜️ Louisiana – Remote 🌲 North Carolina – Remote 🦀 Maryland – Remote 🔔 Pennsylvania – Remote ☕ Washington – Remote

💵 $79.3k - $127.1k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Highmark Health

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1852

🛡️ Insurance

💼 Consulting

📦 Logistics

💰 $5M Grant on 2021-05

Insurance • Consulting • Logistics

Highmark Health is a healthcare company committed to reinventing the healthcare system and improving its services for everyone. The organization offers a broad range of career opportunities across various fields such as clinical care, technology, finance, and marketing. Highmark Health emphasizes diversity, equity, and inclusion in its workforce, creating a supportive environment for employees from all backgrounds. The company has been recognized for its commitment to disability inclusion, diversity, and military-friendly employment. As an independent licensee of the Blue Cross Blue Shield Association, Highmark Health strives to create remarkable healthcare experiences for its customers and employees alike.

📋 Description

• Conduct Information Risk Assessments as assigned to the team • Request and analyze documentation necessary to perform appropriate assessment and conduct necessary interviews in order to collect and review relevant materials necessary to produce results of the assessment • Clearly and concisely document and communicate risk assessment results with requestor, security architects and management, as appropriate • Conduct and formulate appropriate risk scoring, as it relates to threat, vulnerability, likelihood, impact, security controls/counter-measures, etc. • Understand and contribute to inventory of risk register tracking, scoring and associated risk statements • Perform follow up activities related to exceptions, risk acceptance, corrective action plans and additional mitigation activities • Communicate risk treatment methodology; risk avoidance, risk acceptance, risk transference and risk mitigation to appropriate groups • Partner with multiple projects and initiatives to apply security architecture requirements, develop architecture solutions, integrate security into solution designs, access risks of security gaps, and develop architecture remediation

🎯 Requirements

• Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field • At least 7 years' experience in Information Security, Governance, Risk and/or Compliance • Minimum 3 - 5 years' experience in Information Security and/or Information Risk Management and/or Information Technology • 1 - 3 years' experience within Information Security Governance, Risk and/or Compliance functions and activities • Familiarity with technologies such as intrusion Prevention Systems (IPS), firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), and virtualization platforms • Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3 • Familiarity with secure SDLC best practices • Strong teamwork and interpersonal skills

🏖️ Benefits

• Health insurance • 401(k) matching • Paid time off • Flexible work hours • Professional development opportunities