Senior Information Risk Consultant

Highmark Health; Minnesota; Hybrid; USD 95,000 - 148,000; Full time

Job summary

A leading health organization in Minnesota seeks a seasoned cybersecurity professional to lead risk assessments and integrate security architecture. The ideal candidate will have a Bachelor’s Degree in Information Security and at least 7 years of relevant experience. The role promotes a hybrid work model with in-office attendance three days a week. Applicants should be adept at presenting security concepts across diverse audiences. Join this supportive environment to enhance compliance and lead meaningful initiatives.

Qualifications

• Minimum of 7–10 years’ experience in Information Security and/or Information Risk Management.
• 5–7 years’ experience in Information Security Governance, Risk, and/or Compliance.
• Familiarity with governance tools and mentoring team members.

Responsibilities

• Lead information risk assessments and produce assessment results.
• Document and communicate risk assessment outcomes to stakeholders.
• Conduct risk scoring related to threats and vulnerabilities.

Skills

Risk assessment and analysis

Information Security concepts communication

Collaboration on security architecture

Education

Bachelor’s Degree in Information Security or related field

Tools

Intrusion prevention systems

Firewalls

Data loss prevention technologies

Job description

Why consider this job opportunity

Salary up to $147,500.

Opportunity for career advancement and growth within the organization.

Hybrid work model with in‑office attendance required only three days a week.

Chance to lead cybersecurity initiatives for mergers and acquisitions.

Supportive and collaborative work environment with cross‑functional teamwork.

Engage in meaningful work that enhances compliance with critical regulatory frameworks.

What to Expect (Job Responsibilities)

• Lead information risk assessments and analyze documentation to produce assessment results.
• Clearly document and communicate risk assessment outcomes to stakeholders.
• Conduct risk scoring related to threats, vulnerabilities, and security controls.
• Collaborate with various projects to integrate security architecture requirements.
• Prepare and present solutions to different levels of management.

What is Required (Qualifications)

• Bachelor’s Degree in Information Security, Information Systems, Information Assurance, Computer Science, or a related field.
• Minimum of 7–10 years’ experience in Information Security and/or Information Risk Management.
• 5–7 years’ experience in Information Security Governance, Risk, and/or Compliance.
• Familiarity with technologies such as intrusion prevention systems, firewalls, and data loss prevention.
• Proven ability to communicate and present Information Security concepts to diverse audiences.

How to Stand Out (Preferred Qualifications)

• Master’s Degree in Computer Science, Information Security, or a related field.
• 10–15 years’ experience in Information Security with a focus on mergers and acquisitions.
• Strong background in cybersecurity governance and policy lifecycle management.
• Expertise in producing executive‑ready dashboards for leadership.
• Experience with governance tools and mentoring team members.

We prioritize candidate privacy and champion equal‑opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately.

We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top‑tier employer.