Remote InfoSec & AI Vendor Risk Analyst

Blue Cross & Blue Shield of Rhode Island; United States; Hybrid; USD 83,000 - 125,000; Full time

Benefits offered by this job

Flexible work arrangements

Tuition reimbursement

Health, dental, and vision insurance

Paid time off

Job summary

Blue Cross & Blue Shield of Rhode Island is seeking an innovative and detail-oriented security professional to join its Information Security team. This role assesses, monitors, and mitigates risks from third-party vendors, delegates, and AI-enabled solutions, supporting EVO and AI governance programs.

You will conduct risk assessments, review controls (SOC 2, HITRUST, ISO), maintain risk inventories, and collaborate with stakeholders to align with policies and regulatory requirements while

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or Risk Management, or equivalent experience.
• 3+ years in vendor management or third-party risk.
• Experience with AI, ML, or generative AI risk preferred.
• Certifications such as CISSP/CISA/CRISC are a plus.

Responsibilities

• Conduct security, privacy, and risk assessments of third-party vendors and AI-enabled solutions.
• Collaborate with stakeholders to align practices with policies and regulatory requirements.
• Review attestations and certifications (SOC 2, HITRUST, ISO) for vendor risk.
• Maintain vendor and AI risk inventories and documentation.
• Evaluate controls related to cybersecurity, privacy, and model governance.
• Support EVO and AI governance implementation and monitoring.

Skills

Analytical skills

Organizational skills

Communication skills

Self-driven

Education

Bachelor’s degree in Cybersecurity/IT

Tools

Microsoft Office

Outlook

Word

Excel

PowerPoint

Job description

Blue Cross & Blue Shield of Rhode Island is seeking an innovative and detail-oriented security professional to join its Information Security team. This role assesses, monitors, and mitigates risks from third-party vendors, delegates, and AI-enabled solutions, supporting EVO and AI governance programs.

You will conduct risk assessments, review controls (SOC 2, HITRUST, ISO), maintain risk inventories, and collaborate with stakeholders to align with policies and regulatory requirements while