Senior InfoSec Risk & Data Governance Lead (Remote)

BlueCross BlueShield of Tennessee; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

BlueCross BlueShield of Tennessee is seeking a Senior Information Security Risk Analyst on the GRC team. You will lead the SAST/DAST program, assess vulnerabilities, and translate findings into business risk insights.

This role also supports enterprise data governance initiatives and will partner with security, privacy, and business teams to strengthen governance practices. The position is remote, with the final round of interviews conducted on-site in Chattanooga, TN.

Qualifications

• 5 years of professional information security experience with 2 years in GRC functions.
• Experience with AI-enabled tools to automate and enhance GRC processes is preferred.
• Certifications such as CISSP, CRISC, CISA, or CISM are preferred.

Responsibilities

• Lead SOC 2 Audit Support with evidence collection and control validation.
• Develop and maintain NIST SSPs and related documentation.
• Oversee vulnerability management and remediation efforts.
• Conduct enterprise and third-party risk assessments and monitoring.
• Communicate risk findings clearly to technical and non-technical stakeholders.
• Support customer security assurance through RFP responses and questionnaires.

Skills

Application security risk management

SAST/DAST platforms

Vulnerability management

Risk assessment

Cross-functional collaboration

Education

Bachelor's degree in a relevant field

Tools

SAST tooling

DAST tooling

NIST frameworks

Job description

BlueCross BlueShield of Tennessee is seeking a Senior Information Security Risk Analyst on the GRC team. You will lead the SAST/DAST program, assess vulnerabilities, and translate findings into business risk insights.

This role also supports enterprise data governance initiatives and will partner with security, privacy, and business teams to strengthen governance practices. The position is remote, with the final round of interviews conducted on-site in Chattanooga, TN.