Analysis Software, CISA - Certified Information Systems Auditor, CISM - Certified Information Security Manager, Cloud Computing, Computer Security, Dental Insurance, Documentation, HIPAA (Health Insurance Portability and Accountability Act), Information Technology & Information Systems, Information/Data Security (InfoSec), Infrastructure Software, Internet Security, Leadership, Maintain Compliance, Management Strategy, Network Security, PCI-DSS, People Management, Policy Development, Process Development, Regulations, Regulatory Compliance, Reporting Dashboards, Reporting Skills, Retirement Plan, Risk, Risk Analysis, Risk Management, Security Analysis, Security Information and Event Management (SIEM), U.S. National Institute of Standards and Technology (NIST), Vision Plan
Overview
We are seeking a Cybersecurity Risk Analyst to support and coordinate the efforts around analyzing, classifying, monitoring, and mitigating cybersecurity risks across our organization. This role involves analyzing threats, evaluating vulnerabilities, and ensuring compliance with regulatory and organizational security standards. The Cybersecurity Risk Analyst will provide advice and recommendations to organizational stakeholders to support resolution and mitigation of risk areas identified through routine risk management processes.
Benefits
We offer a comprehensive benefits package designed to support your well-being and professional development, including:
- Flexible work schedules
- Health, dental, and vision insurance
- Retirement plan options
- Tuition reimbursement
- Paid time off
- Employee wellness programs
- Career advancement opportunities
Key Responsibilities
- Risk Assessment & Analysis
- Conduct risk assessments on systems, infrastructure, software applications, and processes.
- Identify and assess security risks associated with third-party vendors.
- Analyze security incidents and emerging threats to determine potential impact.
- Compliance & Governance
- Ensure adherence to regulatory frameworks and standards (e.g., HIPAA, PCI-DSS).
- Support audits and maintain documentation for compliance reporting.
- Monitoring & Reporting
- Develop and maintain risk registers and dashboards.
- Prepare detailed reports and present findings to leadership and stakeholders.
- Policy & Process Development
- Assist in creating and updating security policies, standards, and procedures.
- Recommend risk mitigation strategies and security controls.
- Collaboration
- Work with IT, Security, and Business teams to implement risk management strategies.
- Provide guidance on secure practices and risk reduction.
Qualifications
- Experience
- 4+ years in cybersecurity, GRC, or related field.
- Familiarity with risk assessment methodologies and frameworks.
- Familiarity with security frameworks and regulatory standards (e.g., NIST, HIPAA, PCI-DSS).
- Technical Skills
- Knowledge of vulnerability management tools, SIEM platforms, and risk analysis software.
- Understanding of network security, cloud security, and data protection principles.
- Education & Certifications
- Bachelor's degree in Cybersecurity, Information Technology, or related technical field.
- Preferred: CISM, CISA, CRISC, or similar certifications.
Keywords
Cybersecurity, Risk Analyst, Risk Management, Vulnerability Management, Cybersecurity Risk, HIPAA, PCI-DSS, NIST, GRC, SIEM, Network Security, Cloud Security, Data Protection, CISM, CISA, CRISC, Risk Assessment, Compliance, Threat Analysis
D
Deaconess Clinic Downtown