Info Sec Analyst

Blue Cross & Blue Shield of Rhode Island; Providence (RI); Ibrido; USD 83.000 - 125.000; Tempo pieno

Descrizione del lavoro

Blue Cross & Blue Shield of Rhode Island is seeking a security professional to assess and manage risks from third-party vendors and AI solutions in a hybrid Providence setting.

You will review security attestations, maintain risk inventories, and collaborate with teams to align with regulatory requirements and internal policies. A strong background in AI governance and healthcare familiarity is highly valued.

Competenze

• Bachelor’s degree or equivalent with relevant security focus.
• 3+ years in vendor management or third-party risk management.
• Experience evaluating AI, ML, or emerging tech risks preferred.
• Familiarity with security standards and attestations (SOC 2, HITRUST, ISO).

Mansioni

• Conduct security, privacy, and risk assessments of third-party vendors and AI solutions.
• Collaborate with stakeholders to ensure compliance with policies and governance.
• Review attestations (SOC 2, HITRUST, ISO) and maintain risk inventories.
• Provide mitigation recommendations and support remediation efforts.

Conoscenze

Vendor management

Risk assessment

AI governance

Regulatory awareness

Formazione

Bachelor’s degree in Cybersecurity / Information Security / IT / Risk Management

Strumenti

SOC 2

HITRUST

ISO certifications

Descrizione del lavoro

Pay Range:$83,200.00 - $124,800.00Please email [e-mail] if you are a candidate seeking a reasonable accommodation for the application and/or interview process.At BCBSRI, our greatest resource is our people.We come from varying backgrounds, different cultures, and unique experiences. We are hard-working, caring, and creative individuals who collaborate, support one another, and grow together. Passion, empathy, and understanding are at the forefront of everything we do—not just for our members, but for our employees as well.We recognize that to do your best work, you have to be your best self.It’s why we offer flexible work arrangements that include remote and hybrid opportunities and paid time off. We provide tuition reimbursement and assist with student-loan repayment. We offer health, dental, and vision insurance as well as programs that support your mental health and well-being. We pay competitively, offer bonuses and investment plans, and are committed to growing and developing our employees.Our culture is one of belonging.We strive to be transparent and accountable. We believe in equipping our associates with the knowledge and resources they need to be successful. No matter where you’re at in the organization, you’re an integral part of our team and your input, thoughts, and ideas are valued.Join others who value a workplace for all.We appreciate and celebrate everything that makes us unique, from personal characteristics to past experiences. Our different perspectives strengthen us as an organization and help us better serve all Rhode Islanders.We’re dedicated to serving Rhode Islanders.Our focus extends beyond providing access to high-quality, affordable, and equitable care. To further improve the health and well-being of our fellow Rhode Islanders, we regularly roll up our sleeves and get to work (literally) in communities all across the state—building homes, working in food pantries, revitalizing community centers, and transforming outdoor spaces for children and adults. Because we believe it is our collective responsibility to uplift our fellow Rhode Islanders when and where we can, our associates receive additional paid time to volunteer.Why this job matters:Blue Cross & Blue Shield of Rhode Island is seeking an innovative and detail-oriented security professional to join its Information Security team. This role is responsible for assessing, monitoring, and mitigating security, privacy, compliance, and operational risks associated with third-party vendors, delegates, and AI-enabled solutions. The successful candidate will support the organization's Enhanced Vendor Oversight (EVO) and AI governance programs by conducting risk assessments, reviewing vendor controls and AI use cases, communicating risk findings to stakeholders, supporting remediation efforts, and helping ensure alignment with organizational policies, regulatory requirements, and industry best practices.What you will do:Conduct security, privacy, and risk assessments of third-party vendors, delegates, and AI-enabled solutions to identify potential risks and vulnerabilities.Collaborate with business and technology stakeholders to ensure third-party and AI-related practices align with organizational policies, regulatory requirements, and governance standards.Review and analyze security attestations, certifications, and supporting documentation (e.g., SOC 2, HITRUST, ISO certifications) to assess vendor risk.Maintain vendor and AI risk inventories, portfolios, engagement records, risk assessments, and related documentation.Evaluate third-party and AI vendor controls related to cybersecurity, data protection, privacy, regulatory compliance, model governance, and secure development practices.Provide risk mitigation recommendations and support remediation activities to improve vendor and AI security posture.Support implementation and monitoring of Enhanced Vendor Oversight (EVO), AI governance requirements, standards, and risk management processes.Stay informed on emerging threats, industry best practices, regulatory developments, and evolving risks related to third-party security, AI, and technology governance.What you need to succeed :Preferred: Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Risk Management, or similar areas of study from an accredited college or university. ORa high school diploma combined with strong industry experience and/or candidates currently enrolled in a bachelor’s degree program will be considered.3+ years of relevant industry experience ideally focused in vendor management, third-party risk management, or related enhanced vendor oversight tasks.Experience evaluating technology, cybersecurity, privacy, or third-party risks associated with Artificial Intelligence (AI), machine learning, generative AI, or emerging technologies is preferred.Relevant certifications are preferred, such as CISSP, CISA, CRISC, or equivalent, but are not required.The Extras:Advanced knowledge of Microsoft Office; including Outlook, Word, Excel, and PowerPoint.Understanding of Artificial Intelligence (AI), Machine Learning (ML), Generative AI, and related technology risks.Knowledge of AI governance frameworks and industry best practices.Familiarity with the NIST Artificial Intelligence Risk Management Framework (NIST AI RMF).Familiarity with ISO/IEC 42001 Artificial Intelligence Management Systems (AIMS).Understanding of AI-related regulatory, privacy, security, and ethical considerations.Experience reviewing AI vendor security questionnaires, AI governance documentation, AI model risk documentation, or AI-related control environments.Strong analytical and organizational skills.Effective oral and written communication skills.Must be a self-driven, team player.Ability to work independently and as part of a team.Knowledge of healthcare industry regulations and standards is a plus.Location:BCBSRI is headquartered in downtown Providence, conveniently located near the train station and bus terminal. We actively support associate well-being and work/life balance and offer the following schedules, based on role:In-office : onsite 5 days per weekHybrid: onsite 2-4 days per weekRemote: onsite 0-1 days per week. Permitted to reside in the following states, pending approval from the Human Resources Department: Arizona, Connecticut, Florida, Georgia, Louisiana, Massachusetts, North Carolina, Oklahoma, Rhode Island, South Carolina, Texas, VirginiaOur culture of belonging at Blue Cross & Blue Shield of Rhode Island (BCBSRI) is at the core of all we do, and it strengthens our ability to meet the challenges of today’s healthcare industry. BCBSRI is an equal opportunity employer.The law requires an employer to post notices describing the Federal laws. Please visit www.eeoc.gov/know-your-rights-workplace-discrimination-illegal to view the \"Know Your Rights\" poster.