IS Project Leader-Security Risk Assesor/Analyst

Bluestone Software; Glendale Heights (IL); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player in healthcare is seeking a Security Risk Assessor to enhance their IT Security department. This role involves identifying and managing security risks, ensuring compliance with regulations like HIPAA and PCI, and collaborating with both IT and business leaders. The ideal candidate will have a strong background in cybersecurity, excellent communication skills, and the ability to lead projects effectively. Join a team that is committed to maintaining the highest standards of security in one of the top healthcare organizations in the Midwest, where your contributions will play a crucial role in safeguarding sensitive information and improving overall security practices.

Qualifications

• 5-10 years of IT and security experience with a focus on risk assessment.
• Bachelor's in Cybersecurity or equivalent experience preferred.

Responsibilities

• Identify, prioritize, and communicate security risks to stakeholders.
• Produce assessments and recommend remediation options for identified risks.

Skills

Risk Assessment

Information Security

Regulatory Compliance (HIPAA, PCI)

Business Analysis

Project Management

Communication Skills

Education

Bachelor’s degree in Cybersecurity

Certifications (CISSP, CISM, CISA)

Project Management Education

Tools

Data Warehouses

Mainframes

Networks

Applications

Job description

IS Project Leader-Security Risk Assessor/Analyst

• Full-time

Client is a leader in the healthcare industry responsible for almost 60% of all the hospitals and facilities in Illinois. Rated as one of the best healthcare companies in the country, they are revamping their IT Security department. They are looking for the best employees to help with this initiative and currently are hiring Security Risk Assessors. If you are looking to work for the best Healthcare company in the Midwest, then this is the job for you!

The Security Risk Assessor will be responsible for identifying, prioritizing, reporting, and tracking information technology and process security risks. Applying in-depth knowledge of regulatory requirements (HIPAA, PCI, etc.), industry trends, and Information Security best practices, this position will assess risk over a spectrum of technologies, from large and complex projects to smaller service-based initiatives. This position produces assessments with evidence and policy-based descriptions of identified risks as well as recommended options for remediating them. The Security Risk Assessor ensures that identified risks are centrally recorded with sufficient detail (e.g., ownership, priority, follow-up plans, and dates) to produce up-to-date profiles of enterprise risk status. The Security Risk Assessor will successfully articulate the risk profile and status to both technology and business leadership.

Apply proven methods of risk assessment in collaboration with business and IT stakeholders to identify, prioritize, and communicate security risk. Provide security requirements and guidance to business owners and Information Technology sponsors to ensure alignment to Information Security policy, process, and standards.

Minimum Requirements:

1. Bachelor’s degree appropriate to Cybersecurity discipline or equivalent combination of education and experience. Related certifications (e.g., CISSP, CISM, CISA) preferred.
2. 5 – 10 years of combined IT and security work experience with a broad range of exposure to business/systems analysis and security assessments.
3. In-depth knowledge of Information Security risks and one or more security frameworks (HIPAA, PCI, etc.) and industry best practices.
4. Working knowledge of technical areas such as data warehouses, mainframes, networks, applications, etc.
5. Experience in leading Information Services projects.
6. Experience in delivering formal presentations.
7. Excellent verbal and written communication skills.
8. Project Management Education.

All your information will be kept confidential according to EEO guidelines.