Information Security Risk Analyst I

Nationwide-Children; Columbus (OH); On-site; USD 70,000 - 90,000; Full time

Job summary

Nationwide-Children is seeking an Information Security and Risk Analyst to support the ISRD. You will participate in developing and maintaining information security policies, standards, and procedures for the organization in Columbus, OH.

The role involves planning and conducting security assessments, contributing to risk analysis and treatment, and supporting day-to-day security operations, including incident response, third-party risk, vulnerability management, awareness training, and disaster

Qualifications

• BS in Computer Science or equivalent experience.
• Continues to stay actively involved in outside education advancement.
• Certifications: Security+, CISSP or equivalent preferred.

Responsibilities

• Develop and maintain information security policies, standards and procedures.
• Plan and conduct security assessments on systems, processes, and technologies to ensure compliance.
• Participate in risk analysis to determine recommended risk treatment.
• Support day-to-day information security processes including incident response, third party risk management, vulnerability management, reporting, security awareness training, and disaster recovery.
• Coordinate resources for project and operational support.

Skills

Strong problem-solving

Presentation skills

Communication skills

Project management

MS Office

Education

BS in Computer Science

Tools

Microsoft Office

Job description

Overview:Job Description Summary:Supports the NCH Information Security and Risk Department (ISRD). Participates in varying subjects including Information Security, Risk Management, Privacy, and other related concepts.Job Description:Essential Functions:Participates in the development and maintenance of information security policies, standards, and procedures.Plans and conducts security assessments on new and existing systems, processes, and technologies to determine compliance with policies, standards and regulatory requirements.Participates in risk analysis of identified issues to determine recommended risk treatment.Supports day-to-day information security processes including incident response, third party risk management, vulnerability management reporting, security awareness training, and disaster recovery.Coordinates business and information services resources for project and operational support.Stays up-to-date and informed of information security industry changes and trends.Education Requirement:BS in Computer Science or equivalent experience required.Continues to stay actively involved in outside education advancement.Licensure Requirement:(not specified)Certifications:Security+, CISSP or equivalent preferred.Skills:Strong problem-solving ability.Exceptional presentation skills.Exceptional interpersonal, written, and verbal communication skills.Demonstrated project management skills.Proficient in Microsoft Office.Experience:Twoyears of experience in IT; experience in healthcare, preferred.Physical Requirements:OCCASIONALLY: Climb stairs/ladder, Lifting / Carrying: 0-10 lbs, Lifting / Carrying: 11-20 lbs, Standing, WalkingFREQUENTLY: (none specified)CONTINUOUSLY: Audible speech, Computer skills, Decision Making, Flexing/extending of neck, Hand use: grasping, gripping, turning, Hearing acuity, Interpreting Data, Problem solving, Repetitive hand/arm use, Seeing – Far/near, SittingAdditional Physical Requirements performed but not listed above:(not specified)"The above list of duties is intended to describe the general nature and level of work performed by individuals assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the individuals so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct, and control the work of employees under their supervision. EOE M/F/Disability/Vet"