Senior Information Risk Analyst (Remote)

Blue Cross and Blue Shield of Massachusetts, Inc.; Boston (MA); On-site; USD 111,000 - 136,000; Full time

Benefits offered by this job

Paid time off

Medical/dental/vision insurance

401(k)

Well-being benefits

Job summary

Blue Cross Blue Shield of Massachusetts, Inc. is seeking a Senior Information Risk Analyst to evaluate technology risk posture, conduct third-party risk assessments, and translate complex threats into actionable business insights.

You will partner with Legal and Procurement to guide mitigations and govern risk across the organization. Based in Massachusetts or remote US-based, this role requires strong risk management expertise, familiarity with HIPAA/HITRUST, and the ability to present risk

Qualifications

• Experience in third-party risk management or cybersecurity with risk focus.
• Understanding of HIPAA, HITRUST and healthcare regulatory frameworks.
• Experience with enterprise GRC platforms and risk tools.

Responsibilities

• Perform vendor risk assessments and communicate risks aligned with risk appetite and requirements.
• Function as a technology risk SME with knowledge of infrastructure resiliency and secure data transmission.
• Execute technology risk assessments across applications, initiatives, and business processes.
• Evaluate vendor contractual protections to ensure mitigations meet regulatory and data risk goals.
• Guide negotiations on contract language with Legal and Procurement.
• Translate HIPAA requirements into plain language for business units and implement safeguarding plans.
• Create executive dashboards and visual reports for senior leadership with risk metrics.
• Collaborate with cross-functional teams to embed risk management in business processes.
• Drive governance document reviews and contribute to risk program maturity.

Skills

Third-party risk management

Regulatory compliance

Application risk analysis

Data analytics

Visualizations

Education

BA or BS degree in Risk Management, Technology, Business Administration, Information Security, or related field

Tools

Whistic

RiskRecon

ServiceNow

Job description

Blue Cross Blue Shield of Massachusetts, Inc. is seeking a Senior Information Risk Analyst to evaluate technology risk posture, conduct third-party risk assessments, and translate complex threats into actionable business insights.

You will partner with Legal and Procurement to guide mitigations and govern risk across the organization. Based in Massachusetts or remote US-based, this role requires strong risk management expertise, familiarity with HIPAA/HITRUST, and the ability to present risk