InfoSec Risk & Controls Analyst

Avera; Sioux Falls (SD); On-site; USD 71,000 - 107,000; Full time

Benefits offered by this job

PTO from day 1

Retirement matching up to 5%

Career development & mentorship

Equal Opportunity Employer

Job summary

Avera is seeking an IT Security Risk Analyst to assist in risk identification, control development, and evaluation across IT and business environments. You will support testings, policy updates, and remediation efforts while ensuring compliance with federal and state regulations.

Ideal candidates have 4–6 years in IT security or compliance, with CISA and CISSP certifications preferred, and will participate in audits, DR planning, and vendor risk assessments as part of a multidisciplinary team.

Qualifications

• Bachelor's degree in a related field is required or equivalent.
• CISA and CISSP certifications are highly preferred.
• 4–6 years of experience in IT security, risk, or compliance roles.
• Experience with IT controls, audits, and policy development.

Responsibilities

• Assess and improve the adequacy of the security strategy in IT and business environments.
• Plan, design, and coordinate business continuity and disaster recovery efforts.
• Test and evaluate IT controls; document deficiencies and remediation steps.
• Update information security policies, guidelines, and standards to meet laws.
• Support IT audits and vendor risk assessments; coordinate with internal teams.

Skills

Info security

Risk assessment

IT controls

Compliance

Auditing

Education

Bachelor's degree in related area

CISA

CISSP

Tools

SOC

ITGC testing tools

Job description

Avera is seeking an IT Security Risk Analyst to assist in risk identification, control development, and evaluation across IT and business environments. You will support testings, policy updates, and remediation efforts while ensuring compliance with federal and state regulations.

Ideal candidates have 4–6 years in IT security or compliance, with CISA and CISSP certifications preferred, and will participate in audits, DR planning, and vendor risk assessments as part of a multidisciplinary team.