Information Security GRC Analyst III – CISSP Preferred

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate, track, and communicate information security risks

• Assess and report on vendor and third-party risks to facilitate vendor risk management efforts

• Collaborate with staff and/or vendors to create information security risk mitigation strategies

• Monitor and provide updates on risk mitigation strategies to ensure prompt execution

• Involve employees in information security risk management and clarify their responsibilities

• Evaluate and report exceptions to policies, procedures, and limits to management

• Work with the Enterprise Risk Management office to ensure alignment of information risk management policies and guidance

• Contribute to the objectives of operational departments

• Serve as a technical authority in the relevant domain

• Suggest technological improvements to enhance the experiences of CareSource customers and partners

• Carry out other job-related tasks as assigned

⛳️ Requirements

• Bachelor's Degree or equivalent years of relevant experience is required

• At least seven (7) years of relevant work experience is essential

• CRISC or SSCP certification is preferred

• CISSP certification is preferred

• Capability to prioritize and execute tasks both independently and within collaborative teams

• Excellent written and verbal communication, listening, critical thinking, presentation, and facilitation skills

• Ability to forge effective working relationships with stakeholders across various levels

• Competence in managing multiple projects with a sense of urgency

• Strong problem-solving abilities and attention to detail

• Proficient technical knowledge/experience in IT audit; application, server, and network security; security event monitoring and incident response; SOX compliance; Microsoft Office; access management/authentication and authorization; security monitoring; data encryption; computer networking security; internet protocols (SSL, IPSEC, TCP/IP); Windows operating system; and project management

🏝️ Benefits

• Bonus linked to both company and individual performance

• Extensive and comprehensive total rewards package

• Support for employee total well-being