Senior Information Security Risk Analyst
Contract Excelraise Internal Jobs posted 1 day ago in Information Technology Shortlist Email JobJob Detail
-
Job Code 762829
-
Tax Term W2 Hourly1099Corp To Corp
-
Career Level Mid Level
-
Experience 5 Years
-
US Work Status US Citizen
-
Job Duration 12 Months
-
Qualifications Bachelor's Degree
Job Description
Excelraise, LLC is a leading provider of full-service IT solutions and a talent management company headquartered in Denver, CO. At Excelraise, we specialize in IT staffing solutions tailored for government and federal clients across the USA.
Excelraise, LLC values your referrals! Refer qualified candidates for our open Job Postings and earn a generous REFERRAL BONUS for successful placements. Submit referrals here: Excelraise Referral Program.
Excelraise, LLC is seeking an Senior Information Security Risk Analyst for our client in Raleigh, NC.
***This is Onsite Job***
***All work must be completed on-site***
***Candidate must be able to attend an in-person interview***
This engagement ensures compliance with industry-standard frameworks, supports proactive risk mitigation, & positions NC HIEA for future HITRUST certification.Plan and conduct NC HIEA’s annual enterprise security risk assessment using NIST SP 800-30, ISO 27005, or FAIR methodologies.
Responsibility:
- Ensure full alignment with NIST SP 800-53 Revision 5, including: RA (Risk Assessment), AC (Access Control), SC (System Communications Protection), IR (Incident Response), and more.
- Incorporate NIST Privacy Framework and NIST SP 800-53 Rev. 5 privacy control families (AP, AR, DI, DM, IP, SE, TR, UL).
- Build and maintain a comprehensive risk register, with treatment plans for mitigation, transfer, acceptance, or avoidance.
- Map risks and mitigation efforts to HITRUST CSF control domains to support future certification
- Develop and deliver documentation, dashboards, and executive summaries.
- Collaborate with internal stakeholders to validate findings and support security governance efforts.
Basic Qualifications:
- Experience in IT risk management, cybersecurity, or information security assessment.
- Demonstrated knowledge of NIST SP 800-30, NIST SP 800-53 Rev. 5, and NIST Privacy Framework.
- Experience performing security and privacy risk assessments with documentation aligned to federal and state standards.
- Familiarity with HIPAA Security and Privacy Rules, and healthcare-specific risk domains.
- Experience with HITRUST CSF alignment or certification preparation.
- Strong written and verbal communication skills for technical and executive audiences.
Other jobs you may like
-
Network Architect Featured
- @ Excelraise Internal Jobs
- Columbia, South Carolina, United States
- Information Technology