Job Summary
Seeking an experienced Information Security Risk Analyst to conduct annual third-party risk assessments for technology vendors in accordance with the North Carolina Statewide Information Security Manual.
Responsibilities include vendor interviews, evidence evaluation, risk identification, and preparation of System & Data Inventory, Risk Registry, and Risk Assessment Reports (RAR).
Required Skills
- Strong knowledge of operating systems, network security, IAM, and cryptography.
- Expertise in NIST SP 800-53, 800-30, and 800-37.
- Experience with NIST Cybersecurity Framework (CSF) and Privacy Framework.
- Ability to conduct vendor assessments, evaluate evidence, and communicate risks to management.
- CISSP or CISM certification.
Preferred
- Experience with HITRUST risk assessments.
Education & Experience
- Bachelor's degree with 2 years of IT security experience, OR Associate degree with 3 years of experience, or equivalent combination.
- Typically 3–5 years of relevant experience.
Note: Urgent requirement with a shortened submission window.
About Us
We are specialized in recruiting and deliver the best professional talent of industry and we are committed to deliver best experience for our clients and job seekers.
With over two decades of experience in the recruitment industry, we proudly help you to find the next job that matches your professional skills.
Our team understands your needs or requirement before starting the recruitment, that enables to find the high quality of talent with high success rate of talent delivery, keeps us continue to be the best in the industry.
By responding to this job posting, you are consenting to receive text/SMS messages from us. Thank you.