Remote Information Security Risk Analyst — HIPAA & Compliance

Gulf Coast Automation Group; Chicago (IL); Remote; USD 105,000 - 110,000; Full time

Benefits offered by this job

Health insurance

401(k)

Paid time off

Job summary

TalentFish is seeking an Information Security Risk Analyst to join the GRC team in a Direct Hire role. The position can be remote and focuses on executing and enhancing the organization’s information security risk management program across IT assets, processes, and vendors.

You will lead risk assessments, document findings, and communicate with leadership while aligning with HIPAA, NIST, and healthcare regulations. A strong background in audits and risk reporting is essential.

Qualifications

• Bachelor's degree required; master's preferred.
• 3+ years in cybersecurity or risk management; healthcare exp. preferred.
• Experience with risk assessment methodologies and audits.
• Familiarity with HIPAA, NIST, and healthcare regulations.
• CRISC/CISM/CISA or equivalent within 12 months.

Responsibilities

• Lead and conduct comprehensive information security risk analysis for IT assets, applications, processes, medical devices, and third-party vendors.
• Evaluate threats and vulnerabilities affecting confidentiality, integrity, and availability of ePHI and sensitive data, aligning with HIPAA and NIST.
• Lead and manage risk management initiatives, maintain risk register and scoring methodology.
• Oversee CAPs, penetration testing results, audit findings, and risk treatment outcomes.
• Collaborate with IT partners to prioritize, implement, and track remediation efforts.
• Monitor regulatory changes and industry threats to identify emerging risks and mitigate.
• Contribute to risk reporting, dashboards, and governance reviews.
• Help develop and improve cybersecurity policies and procedures; evaluate policy exceptions.
• Enhance cybersecurity awareness by communicating risk insights to technical and non-technical audiences.

Skills

Risk assessment

Regulatory knowledge

HIPAA/NIST

Stakeholder communication

Lead risk assessments

Audit tracking

Education

Bachelor's degree in IS/CS/IT

Tools

Risk management platforms

Job description

TalentFish is seeking an Information Security Risk Analyst to join the GRC team in a Direct Hire role. The position can be remote and focuses on executing and enhancing the organization’s information security risk management program across IT assets, processes, and vendors.

You will lead risk assessments, document findings, and communicate with leadership while aligning with HIPAA, NIST, and healthcare regulations. A strong background in audits and risk reporting is essential.