Senior Security Risk Analyst

🔥 12 hours ago

🏰 Missouri – Remote

🏰 Missouri – Remote

💵 $87.7k - $157.8k / year

⏰ Full Time

🟠 Senior

🎲 Risk

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Centene Corporation

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1984

🛡️ Insurance

💼 Consulting

🏥 Healthcare

Insurance • Consulting • Healthcare

Centene Corporation is a leading provider of government-sponsored healthcare services, specializing in delivering affordable and high-quality healthcare solutions. For over 40 years, Centene has focused on transforming the health of communities by expanding access to Medicaid, Medicare, and Health Insurance Marketplace services, as well as serving military communities through the TRICARE program. As the largest Medicaid managed care organization and a key participant in the Marketplace, Centene emphasizes localized healthcare delivery combined with strong partnerships with nonprofit organizations to meet the unique needs of its members. Centene is also committed to corporate sustainability and social responsibility, prioritizing environmental stewardship and ethical governance to enhance the well-being of the communities it serves.

📋 Description

• Own and manage the lifecycle and documentation of cybersecurity risks • Coordinate risk intake, documentation, validation, monitoring, escalation, and reporting • Develop and maintain standardized processes for capturing risks from cybersecurity GRC workstreams • Design and maintain the cybersecurity risk register structure, including taxonomy, categorization, scoring, lifecycle states, ownership, thresholds, workflows, and responsibilities • Own and maintain the cybersecurity component of the enterprise risk register • Coordinate with Enterprise Risk Management to align cybersecurity and enterprise risk management programs • Engage cybersecurity risk owners to understand risk causes, drivers, impacts, mitigation strategies, remediation plans, projects, and controls • Advise stakeholders on risk documentation standards, ownership, status updates, and escalation protocols • Provide reporting on individual risks and the overall cybersecurity risk profile • Highlight top, emerging, and persistent cybersecurity risks for prioritization and executive decision-making • Coordinate with penetration testing, risk assessment, control monitoring, maturity assessment, and security issue management teams • Develop and improve dashboards, scorecards, and recurring cybersecurity risk reporting • Partner with metrics, reporting, data, and analytics teams to improve data quality, automation, consistency, and scalability • Participate in specialty GRC projects, including framework mapping, tooling enhancements, audit support, lifecycle improvements, metrics governance, and risk deep dives • Develop and maintain cybersecurity risk management documentation, policies, standards, procedures, templates, guidance materials, and roadmaps • Ensure practices align with NIST CSF, ISO/IEC 27001, HIPAA Security Rule, HITRUST CSF, SOC 1/SOC 2, and ARC AMPE • Promote transparent, accountable, risk-aware decision-making through timely, customer-focused risk insights • Perform other duties as assigned • Comply with all policies and standards

🎯 Requirements

• Must be authorized to work in the U.S. without employment-based visa sponsorship now or in the future • Bachelor's degree in IT, MIS, Accounting, Finance, Business Administration, related field or equivalent experience • 4+ years of combined auditing and IT controls design experience • Knowledge of IT systems and processes • Experience evaluating internal technical control systems • 4+ years of experience in enterprise risk management, operational risk, cybersecurity governance, risk and compliance (GRC), audit, or related disciplines within a large or regulated enterprise environment • Demonstrated hands-on experience managing, administering, or materially contributing to a formal cybersecurity or technology risk register • Strong working knowledge of risk assessment methodologies, risk taxonomies, inherent risk, residual risk, risk appetite, risk tolerance, and risk treatment strategies • Understanding of the cybersecurity risk management lifecycle • Experience supporting GRC-related initiatives or projects beyond steady-state operations preferred • Experience using Archer or comparable GRC platforms strongly preferred • Ability to work cross-functionally and facilitate discussions with senior and executive-level stakeholders • Strong written and verbal communication skills • CISSP, Security+, CISM, CISA, CGEIT, or CRISC certification required

🏖️ Benefits

• Health insurance • 401K plan • Stock purchase plans • Tuition reimbursement • Paid time off plus holidays • Flexible approach to work with remote, hybrid, field or office work schedules • Additional forms of incentives may be included in total compensation • Equal opportunity employer committed to diversity

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume