Project Leader-Security Risk Assesor​/Analyst

IS Project Leader-Security Risk Assesor/Analyst

• Full-time

Client is a leader in the healthcare industry responsible for almost 60% of all the hospitals and facilities in Illinois. Rated as one of the best healthcare companies in the country and they are revamping their IT Security department.

The Security Risk Assessor will be responsible for identifying, prioritizing, reporting, and tracking information technology and process Security risks. Applying in-depth knowledge of regulatory requirements (HIPAA, PCI, etc.) , industry trends, and Information Security best practices, this position will assess risk over a spectrum of technologies, from large and complex projects to smaller service-based initiatives.

This position produces assessments with evidence and policy based descriptions of identified risks as well as recommended options for remediating them. The Security Risk Assessor ensures that identified risks are centrally recorded with sufficient detail (e.g., ownership, priority, follow-up plans and dates) to produce up-to-date profiles of enterprise risk status.

The Security risk assessor will successfully articulate the risk profile and status to both technology and business leadership. Apply proven methods of risk assessment in collaboration with business and IT stakeholders to identify, prioritize, and communicate Security risk.

Provide Security requirements and guidance to business owners and Information Technology sponsors to ensure alignment to Information Security policy, process and standards.

Requirements include a Bachelor’s degree appropriate to Cybersecurity discipline or equivalent combination of education and experience. Related certifications (e.g., CISSP, CISM, CISA) are preferred.

• 5 – 10 years of combined IT and Security work experience with a broad range of exposure to business/systems analysis, and Security assessments
• Experience in one or more of the following:

• In-depth knowledge of Information Security risks one or more Security frameworks (HIPAA, PCI, etc.) and industry best practices
• Working knowledge of technical areas such as data warehouses, mainframes, networks, applications, etc.
• Experience in leading Information Services projects
• Experience in delivering formal presentations
• Excellent verbal and written communication skills
• Project Management Education

We are an equal opportunities employer and all your information will be kept confidential according to EEO guidelines.