EITS Security Risk Analyst B EngagementRemote Job

DELTASOFT SOLUTIONS LLC; San Francisco (CA); Remote; USD 100,000 - 130,000; Full time

Job summary

A leading technology firm is seeking an EITS Security Risk Analyst B to work remotely. The role demands expertise in risk management and compliance within the healthcare sector. Responsibilities include maintaining the security framework, conducting risk assessments, and ensuring compliance with relevant regulations. Ideal candidates should possess extensive IT experience, strong analytical skills, and a bachelor's degree in a relevant field. Certifications such as CISSP or CISA are preferred. Competitive compensation is offered, along with a work-from-home option.

Qualifications

• Minimum 7 years of IT experience.
• At least 5 years in IT Security Risk Management / Risk Audit.
• Strong understanding of healthcare regulations and EMR systems.

Responsibilities

• Maintain and enforce the enterprise information security framework.
• Conduct risk analysis and develop mitigation strategies.
• Document and maintain risk governance methodologies.

Skills

IT Security Risk Management

Data Privacy Investigation

Healthcare Regulatory Environment

Analytical Skills

Risk Assessment

Communication Skills

Education

Bachelor’s degree in Information Systems

Tools

ServiceNow

Archer

MetricStream

Job description

Overview

Job43 – EITS Security Risk Analyst B (Engagement)

Location: 100% Remote  Max Submissions: 5  Proposed Start Date: ASAP  Proposed End Date: 06/30/2026

Responsibilities

• Security & Risk Management: Maintain and enforce the enterprise information security and risk management framework. Conduct risk analysis and develop mitigation strategies. Monitor and assess the enterprise threat landscape. Provide realistic risk reporting to the CISO and leadership teams. Track and document internal risk reviews, assessments, and exceptions using a GRC tool.
• Governance & Compliance: Document and maintain risk governance methodologies, policies, and procedures. Ensure compliance with HIPAA, Joint Commission, DSRIP, COBIT, state privacy laws. Conduct and support internal and external audits (operational, compliance, reputational, security). Serve as SME for EMR and PHI-related security risks.
• Risk Assessments & Gap Analysis: Perform enterprise security risk assessments and gap analyses for new technologies and products. Develop and manage risk remediation plans and work plans. Identify information asset owners for data classification initiatives. Support risk exception and risk acceptance documentation processes.
• Technical & Cross-Functional Collaboration: Partner with enterprise architecture teams to align business, technical, and security requirements. Collaborate with security engineering teams to implement security controls. Facilitate meetings between stakeholders and IT teams. Provide written and verbal reports to leadership and committees (including Operational Risk Committee).

Required Qualifications

• Experience: Minimum 7 years of IT experience. At least 5 years in IT Security Risk Management / Risk Audit / Data Privacy Investigation. Minimum 2 years in a supervisory capacity.
• Healthcare Industry Expertise (Required): Strong understanding of EMR systems, PHI data privacy, healthcare regulatory environment. Experience with HIPAA, Joint Commission, CMS regulations.
• GRC & Security Framework Knowledge: Hands-on experience with GRC tools (ServiceNow, Archer, MetricStream preferred). Working knowledge of NIST CSF, HITECH, ISO 27001/27002, PCI DSS, COBIT.
• Technical Skills: Experience reviewing IT solution requirements and implementing security controls. Strong analytical and risk assessment skills. Ability to design compensating controls for security vulnerabilities. Ability to assess business impact of security tools and policies.

Education & Certifications

• Bachelor’s degree in Information Systems or related field
• Preferred Certifications: CISSP, CISA, CRISC, Other relevant security certifications

Preferred Soft Skills

• High integrity and ability to work independently
• Strong communication and reporting skills
• Ability to work in fast-moving environments
• Experience participating in special projects
• Ability to support various locations and flexible shifts if required

Thanks & Regards

Bhanu Prakash

DeltaSoft Solutions

[e-mail]