EITS Security Risk Analyst B (Engagement)--Remote Job
Job43 – EITS Security Risk Analyst B (Engagement)
Location: 100% Remote
Max Submissions: 5
Proposed Start Date: ASAP
Proposed End Date: 06/30/2026
Role Overview
• Serve as a liaison between the CISO’s strategic initiatives and the IT operational teams.
• Translate business IT risk requirements into technical control specifications.
• Develop risk metrics for performance measurement and reporting.
• Coordinate enterprise-level security and risk management efforts.
• Act as a subject matter expert (SME) on information security and regulatory compliance.
Key Responsibilities
Security & Risk Management
• Maintain and enforce the enterprise information security and risk management framework.
• Conduct risk analysis and develop mitigation strategies.
• Monitor and assess the enterprise threat landscape.
• Provide realistic risk reporting to the CISO and leadership teams.
• Track and document internal risk reviews, assessments, and exceptions using a GRC tool.
Governance & Compliance
• Document and maintain risk governance methodologies, policies, and procedures.
• Ensure compliance with:
• HIPAA
• * Joint Commission
• * DSRIP
• * COBIT
• * State privacy laws
• Conduct and support internal and external audits (operational, compliance, reputational, security).
• Serve as SME for EMR and PHI-related security risks.
Risk Assessments & Gap Analysis
• Perform enterprise security risk assessments and gap analyses for new technologies and products.
• Develop and manage risk remediation plans and work plans.
• Identify information asset owners for data classification initiatives.
• Support risk exception and risk acceptance documentation processes.
Technical & Cross-Functional Collaboration
• Partner with enterprise architecture teams to align business, technical, and security requirements.
• Collaborate with security engineering teams to implement security controls.
• Facilitate meetings between stakeholders and IT teams.
• Provide written and verbal reports to leadership and committees (including Operational Risk Committee).
Required Qualifications
Experience
• Minimum 7 years of IT experience
• At least 5 years in IT Security Risk Management / Risk Audit / Data Privacy Investigation
• Minimum 2 years in a supervisory capacity
Healthcare Industry Expertise (Required)
• Strong understanding of:
• EMR systems
• * PHI data privacy
• * Healthcare regulatory environment
• Experience with HIPAA, Joint Commission, CMS regulations
GRC & Security Framework Knowledge
• Hands-on experience with GRC tools (ServiceNow, Archer, MetricStream preferred)
• Working knowledge of:
• NIST CSF
• * HITECH
• * ISO 27001/27002
• * PCI DSS
• * COBIT
Technical Skills
• Experience reviewing IT solution requirements and implementing security controls
• Strong analytical and risk assessment skills
• Ability to design compensating controls for security vulnerabilities
• Ability to assess business impact of security tools and policies
Education & Certifications
• Bachelor’s degree in Information Systems or related field
• Preferred Certifications:
• CISSP
• * CISA
• * CRISC
• * Other relevant security certifications
Preferred Soft Skills
• High integrity and ability to work independently
• Strong communication and reporting skills
• Ability to work in fast-moving environments
• Experience participating in special projects
• Ability to support various locations and flexible shifts if required
Thanks & Regards
Bhanu Prakash
DeltaSoft Solutions
[email protected]
Apply Now
Apply Now
Location: 100% Remote
Max Submissions: 5
Proposed Start Date: ASAP
Proposed End Date: 06/30/2026
Role Overview
• Serve as a liaison between the CISO’s strategic initiatives and the IT operational teams.
• Translate business IT risk requirements into technical control specifications.
• Develop risk metrics for performance measurement and reporting.
• Coordinate enterprise-level security and risk management efforts.
• Act as a subject matter expert (SME) on information security and regulatory compliance.
Key Responsibilities
Security & Risk Management
• Maintain and enforce the enterprise information security and risk management framework.
• Conduct risk analysis and develop mitigation strategies.
• Monitor and assess the enterprise threat landscape.
• Provide realistic risk reporting to the CISO and leadership teams.
• Track and document internal risk reviews, assessments, and exceptions using a GRC tool.
Governance & Compliance
• Document and maintain risk governance methodologies, policies, and procedures.
• Ensure compliance with:
• HIPAA
• * Joint Commission
• * DSRIP
• * COBIT
• * State privacy laws
• Conduct and support internal and external audits (operational, compliance, reputational, security).
• Serve as SME for EMR and PHI-related security risks.
Risk Assessments & Gap Analysis
• Perform enterprise security risk assessments and gap analyses for new technologies and products.
• Develop and manage risk remediation plans and work plans.
• Identify information asset owners for data classification initiatives.
• Support risk exception and risk acceptance documentation processes.
Technical & Cross-Functional Collaboration
• Partner with enterprise architecture teams to align business, technical, and security requirements.
• Collaborate with security engineering teams to implement security controls.
• Facilitate meetings between stakeholders and IT teams.
• Provide written and verbal reports to leadership and committees (including Operational Risk Committee).
Required Qualifications
Experience
• Minimum 7 years of IT experience
• At least 5 years in IT Security Risk Management / Risk Audit / Data Privacy Investigation
• Minimum 2 years in a supervisory capacity
Healthcare Industry Expertise (Required)
• Strong understanding of:
• EMR systems
• * PHI data privacy
• * Healthcare regulatory environment
• Experience with HIPAA, Joint Commission, CMS regulations
GRC & Security Framework Knowledge
• Hands-on experience with GRC tools (ServiceNow, Archer, MetricStream preferred)
• Working knowledge of:
• NIST CSF
• * HITECH
• * ISO 27001/27002
• * PCI DSS
• * COBIT
Technical Skills
• Experience reviewing IT solution requirements and implementing security controls
• Strong analytical and risk assessment skills
• Ability to design compensating controls for security vulnerabilities
• Ability to assess business impact of security tools and policies
Education & Certifications
• Bachelor’s degree in Information Systems or related field
• Preferred Certifications:
• CISSP
• * CISA
• * CRISC
• * Other relevant security certifications
Preferred Soft Skills
• High integrity and ability to work independently
• Strong communication and reporting skills
• Ability to work in fast-moving environments
• Experience participating in special projects
• Ability to support various locations and flexible shifts if required
Thanks & Regards
Bhanu Prakash
DeltaSoft Solutions
[email protected]
Apply Now
Apply Now