Strategic Information Risk Advisor

Highmark Health; Columbus (OH); On-site; USD 79,300 - 127,100; Full time

Job summary

Highmark Health is seeking an Information Security Risk/Compliance professional to work with architecture, compliance, and business teams to assess risks and drive policy adoption. You will test for policy compliance and help implement PCI-DSS, HITRUST, and ISO 27001 controls.

The role requires 3–5 years in security or risk management, familiarity with IPS, firewalls, DLP, SEIM, and virtualization tools, and a strong ability to communicate risk to varied audiences.

Qualifications

• Bachelor's degree in information security, information systems, information assurance, computer science or related field.
• 7 years of information security/compliance experience as substitute for degree.
• Master’s degree preferred in CS or information security.

Responsibilities

• Conduct Information Risk Assessments and analyze necessary documentation.
• Document and communicate risk results to stakeholders.
• Develop risk scoring related to threat, vulnerability, and controls.
• Maintain risk registers and track mitigation actions.
• Prepare solution decks for management.

Skills

Information Security

Risk Management

Communication

Security Architecture

Threat Analysis

Automation

Education

Bachelor's in Information Security

Information Systems

Tools

HITRUST CSF

NIST 800-83

ARCHER

SEIM

PCI-DSS

ISO 27001

Job description

Highmark Health is seeking an Information Security Risk/Compliance professional to work with architecture, compliance, and business teams to assess risks and drive policy adoption. You will test for policy compliance and help implement PCI-DSS, HITRUST, and ISO 27001 controls.

The role requires 3–5 years in security or risk management, familiarity with IPS, firewalls, DLP, SEIM, and virtualization tools, and a strong ability to communicate risk to varied audiences.