Cyber Security Analyst (GRC)

Location: 100% remote

Company

Recruitment provider hiring for a healthcare insurance organization.

What you will do

• Support the cybersecurity risk management program and collaboration across risk-related teams.
• Conduct cybersecurity, business, security control, and third-party risk assessments.
• Identify control gaps, develop mitigation strategies, and manage remediation through closure.
• Prepare risk assessment reports and maintain assessment documentation and repositories.
• Design and integrate security solutions addressing enterprise risks and exposures.
• Develop information security risk metrics, KPIs, and KRIs while supporting vulnerability management and new technology assessments.

Requirements

• 3+ years of relevant cybersecurity experience, specifically in risk management, including third-party or supplier risk assessments.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field; four additional years of relevant experience may substitute for the degree.
• At least one required certification: CISSP, CEH, CTIA-ECCOUNCIL, CAP, or EnCase Certified Examiner.
• Experience with cybersecurity GRC programs and platforms such as Hyperproof, Archer, or ServiceNow GRC.
• Understanding of the NIST Risk Management Framework, information security risk management methodologies, and the FAIR quantitative model.
• Knowledge of HIPAA/PHI security standards, network architecture, firewall security, and cybersecurity risk management techniques.

Nice to have

• SOC reporting or HITRUST knowledge.
• Background with off-premises or cloud platforms.
• Experience in the healthcare insurance or payer industry.

Culture & Benefits

• 100% remote work arrangement.
• Cross-functional collaboration with TPRM, Procurement, Legal, business stakeholders, analytics, and vulnerability management teams.
• Work supporting healthcare data protection, regulatory compliance, and enterprise security risk reduction.