Enterprise Security Risk Assessor

Technogen, Inc.; United States; In loco; USD 150.000 - 190.000; Tempo pieno

Descrizione del lavoro

Technogen, Inc. is seeking an experienced Security Risk Assessor to drive cybersecurity risk assessments across applications, infrastructure, cloud, and third‑party environments.

You will identify risks, quantify impacts, and recommend remediation with a focus on HIPAA, NIST CSF/800-53/800-30, and healthcare security compliance. The ideal candidate brings 12+ years in risk assessment, hands‑on security tooling, and a proven ability to communicate risk to technical teams and executives.

Competenze

• 12+ years of security risk assessment experience.
• 12+ years working with GRC programs and risk management frameworks.
• Strong experience conducting enterprise IT security risk assessments.
• Hands-on experience with security tools and cybersecurity technologies.
• Experience assessing applications, cloud platforms, infrastructure, and third-party environments.
• Knowledge of risk assessment methodologies and frameworks.
• Security & Technical Expertise
• Security Architecture Reviews
• IAM / PAM
• Zero Trust Architecture
• Vulnerability Management
• Encryption Technologies
• SIEM & Security Monitoring
• Threat & Vulnerability Analysis
• Compliance & Regulatory Experience
• HIPAA Security Rule
• HITECH
• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• NIST 800-30
• Healthcare Security & Regulatory Compliance

Mansioni

• Conduct enterprise security risk assessments across applications, infrastructure, cloud environments, and third-party vendors.
• Identify, analyze, quantify, and document cybersecurity risks and provide remediation recommendations.
• Perform architecture-focused risk assessments and evaluate security controls for enterprise systems.
• Review application designs, contracts, integrations, and technology implementations from a security perspective.
• Create risk reports and communicate findings to technical teams, business leaders, and executives.
• Partner with infrastructure, engineering, compliance, privacy, and business stakeholders to develop risk treatment plans.
• Support governance activities including risk registers, risk acceptance, remediation tracking, and executive risk reporting.

Conoscenze

Security Risk Assessment

GRC Programs

Risk Frameworks

Security Architecture

IAM / PAM

Zero Trust

Vulnerability Management

Encryption

SIEM & Monitoring

Threat Analysis

Regulatory Compliance

HIPAA Security

NIST CSF

NIST 800-53

NIST 800-30

Healthcare Compliance

Descrizione del lavoro

We are hiring an experienced Security Risk Assessor with strong expertise in Cybersecurity Risk Assessments, GRC, Security Architecture, and Healthcare Security Compliance.

Key Responsibilities

Conduct enterprise security risk assessments across applications, infrastructure, cloud environments, and third‑party vendors.

Identify, analyze, quantify, and document cybersecurity risks and provide remediation recommendations.

Perform architecture-focused risk assessments and evaluate security controls for enterprise systems.

Review application designs, contracts, integrations, and technology implementations from a security perspective.

Create risk reports and communicate findings to technical teams, business leaders, and executives.

Partner with infrastructure, engineering, compliance, privacy, and business stakeholders to develop risk treatment plans.

Support governance activities including risk registers, risk acceptance, remediation tracking, and executive risk reporting.

Required Skills & Experience

• 12+ years of Security Risk Assessment experience.
• 12+ years working with GRC programs and risk management frameworks.
• Strong experience conducting enterprise IT security risk assessments.
• Hands‑on experience with security tools and cybersecurity technologies.
• Experience assessing applications, cloud platforms, infrastructure, and third‑party environments.
• Knowledge of risk assessment methodologies and frameworks.
• Security & Technical Expertise
• Security Architecture Reviews
• IAM / PAM
• Zero Trust Architecture
• Vulnerability Management
• Encryption Technologies
• SIEM & Security Monitoring
• Threat & Vulnerability Analysis
• Compliance & Regulatory Experience
• HIPAA Security Rule
• HITECH
• NIST Cybersecurity Framework (CSF)
• NIST 800‑53
• NIST 800‑30
• Healthcare Security & Regulatory Compliance

Preferred Background

Healthcare or highly regulated industry experience.

Excellent stakeholder management and executive communication skills.

Strong analytical, documentation, and problem‑solving abilities.

Experience presenting risks, exceptions, and remediation plans to leadership.