Information Security Risk & Compliance Analyst

Avera Health; Sioux Falls (SD); On-site; USD 71,000 - 107,000; Full time

Benefits offered by this job

PTO from day 1

Employer 5% retirement match

Career development & mentorship

Job summary

Avera Health is seeking a security-focused professional to assess IT risk, design controls, and support audits in a dynamic healthcare environment. You will evaluate control design, monitor deficiencies, and help implement remediation strategies across IT and business units.

The role emphasizes working with cross-functional teams to ensure compliance with federal and state regulations, while contributing to business continuity and incident response planning.

Qualifications

• Bachelor's degree in a related field is required.
• CISA certification is preferred.
• CISSP certification is preferred.
• 4–6 years of experience in IT, project management, compliance or security.

Responsibilities

• Assess and evaluate the adequacy of the security strategy and identify risks.
• Plan, design, and coordinate business continuity/disaster recovery plans.
• Test and review IT controls and document remediation results.
• Review security policies and ensure compliance with laws and regulations.
• Support internal/external IT audits and risk assessments.

Skills

Risk assessment

IT security controls

Security auditing

Education

Bachelor's in related area

Job description

Avera Health is seeking a security-focused professional to assess IT risk, design controls, and support audits in a dynamic healthcare environment. You will evaluate control design, monitor deficiencies, and help implement remediation strategies across IT and business units.

The role emphasizes working with cross-functional teams to ensure compliance with federal and state regulations, while contributing to business continuity and incident response planning.