Principal Cybersecurity Risk Analyst

Qualifications: 
• HSD or GED required, Bachelor Degree preferred (or equivalent work experience)
• Third party, technology, and project risk assessment experience
• Experience with Governance, Risk, and Compliance tools
• 5 year experience in Risk Management with advanced understanding of Third-Party Risk Management.
• 7 years of experience in an Information Technology Audit/Information Security
• Proficient working knowledge within the following risk domains/technologies:
- Change Management
- IDS/IPS technologies
- Firewall technologies
- Network Architecture
- Vulnerability Management
- System/Access Administration
- Key Management/Tokenization
- Database and application security
- Secure Software/Code Development
- Physical and Environmental Security
- Security Event Logging & Monitoring
- Database/Application/Network Layer Secure Protocols
- Cloud Security
- Identity & Access Management
- Business Continuity and Disaster Recovery Management
- Automation/Artificial Intelligence

Knowledge:
Requires a solid understanding of IT security concepts with an emphasis on Security and Risk Assessment.
Requires solid knowledge of IT and computer systems.
Requires familiarity with HIPAA security rules and National Institute of Standards and Technology (NIST) standards
Requires familiarity with Vendor Risk Management.
Suggested familiarity with ServiceNow tool.

Skills:
Requires strong analytical thinking skills.
Requires excellent verbal and written communication skills.
Requires excellent interpersonal skills and the ability to work effectively with others as a team.
Requires excellent PC skills and demonstrated proficiency with MS Office Suite.
Requires the ability to handle multiple tasks and prioritize effectively.
Ability to train/mentor incoming team members.