Associate Information Security Analyst - Enhanced Vendor Oversight

BCBSRI; Providence (RI); Hybrid; USD 73,000 - 110,000; Full time

Job summary

An established industry player is searching for a dedicated security professional to enhance its Information Security team. This exciting role involves conducting thorough assessments of third-party vendors, ensuring compliance with industry regulations, and effectively communicating risks to internal stakeholders. The ideal candidate will have a strong background in vendor management and third-party risk oversight, complemented by excellent analytical and communication skills. Join a company that values diversity and inclusion, offering a flexible work environment that promotes work-life balance while making a significant impact in the healthcare sector.

Qualifications

• 3+ years of relevant industry experience focused on vendor management.
• Relevant certifications such as CISSP, CISA, CRISC preferred.

Responsibilities

• Conduct security assessments of third-party vendors.
• Collaborate with stakeholders to align security practices.
• Develop and maintain documentation for risk management.

Skills

Vendor Management

Third-Party Risk Management

Analytical Skills

Communication Skills

Microsoft Office

Education

Equivalent combination of education and work experience

Tools

Microsoft Outlook

Microsoft Word

Microsoft Excel

Microsoft PowerPoint

Job description

Please email [e-mail] if you are a candidate seeking a reasonable accommodation for the application and/or interview process.

Schedule:

Hybrid

Compensation:

$73,000 - $110,000

Why this job matters:

Blue Cross & Blue Shield of Rhode Island is seeking an innovative and diligent security professional to join its Information Security team. In this role, a successful candidate will be pivotal in ensuring the security, compliance, and maintenance of our third-party relationships. The candidate will be responsible for assessing, monitoring, and mitigating risks associated with third-party vendors and delegates. Additionally, they will interact with business units to communicate risks and manage review cycles effectively.

What you'll do:

1. Conduct security assessments of third-party vendors to identify potential risks and vulnerabilities.
2. Collaborate with internal stakeholders to align third-party security practices with company policies and regulatory requirements.
3. Review and analyze third-party attestation and certification artifacts (SOC2, HITRUST, etc.) shared by third parties to identify information security risks.
4. Develop and maintain documentation related to third-party risk management activities.
5. Maintain an organization-wide vendor portfolio for security risks and engagement forms.
6. Provide recommendations for mitigating identified risks and improving third-party security posture.
7. Stay informed about industry best practices and emerging threats related to third-party risk management.

What you'll need to succeed:

1. Equivalent combination of education and work experience.
2. 3+ years of relevant industry experience, ideally focused on vendor management, third-party risk management, or related vendor oversight tasks.
3. Relevant certifications such as CISSP, CISA, CRISC, or equivalent are preferred but not required.
4. Advanced knowledge of Microsoft Office, including Outlook, Word, Excel, and PowerPoint.
5. Strong analytical and organizational skills.
6. Effective oral and written communication skills.
7. Self-driven, team-oriented mindset.
8. Ability to work independently and collaboratively.
9. Knowledge of healthcare industry regulations and standards is a plus.

Location:

BCBSRI is headquartered in downtown Providence, near the train station and bus terminal. We support associate well-being and work/life balance with flexible schedules:

• In-office: 5 days per week onsite
• Hybrid: 2-4 days per week onsite
• Remote: 0-1 days per week, with residence permitted in select states pending HR approval: Arizona, Connecticut, Florida, Georgia, Louisiana, Massachusetts, North Carolina, Oklahoma, Rhode Island, South Carolina, Texas, Virginia

At BCBSRI, diversity and inclusion are central to our values. We are an equal opportunity employer and do not discriminate based on race, color, religion, gender, age, national origin, disability, veteran status, sexual orientation, genetic information, gender identity, or expression.

The law requires employer notices on federal laws prohibiting discrimination. Visit EEOC - EEO is the Law for more information.