网络安全分析师（GRC）
Cyber Security Analyst (GRC)
职位标题：网络安全分析师 (GRC) 地点：100%远程 (EST/CST/MST) 公司概述：Glint Tech Solutions 是一家由女性拥有，全球的 IT 人员和招聘公司，为美国和加拿大各地的企业客户服务。我们目前正在代表一个领先的医疗保险客户招聘。项目描述：我们的客户寻求一名网络安全风险分析师，以通过评估，记录和社会化风险来确保组织数据受到不适当访问，披露和损害的保护。该角色报告给管理员，网络安全风險和合规。关键责任：·支持网络安全风险管理计划，指导多元化的技术团队并与相关风险团队合作 · 与 TPRM,采购，法律和业务利益相关者进行持续监测工作的伙伴 ·评估网络安全控制，识别漏洞和管理减轻策略到关闭 ·开展评估安全实践，数据处理程序和法规合规性 (HIPAA,PCI,GDPR) 的风险评估。·准备详细的风险评估报告并维护全面的文件库。·设计，实施和集成解决方案来应对企业风险。· 制定信息安全风险指标 (KPIs/KRI) 来支持分析团队 · 支持 NIST,FedRAMP 和 HIPAA 合规工作，包括评估准备性，POA&M 管理和持续监测强制性的技能：· 一个或多项认证：CISSP,CEH,CTIA, CAP 或 EnCase 认证考试者 ·计算机科学学士学位，网络安全，IT 或相关领域 （或者额外4年的经验而不是学位）· 5年以上的网络安全经验，特别是风险管理，具有第三方/供应商风险评估知识 ·与 eGRC 平台 （HyperProofNow,Archer 或服务 GC）的经验 · 强大的了解 NIST 风险管理框架和 FAIR 数量模型 · 制定和社会化安全政策，标准和程序的能力 · HIPAA/PHI 安全标准的知识和网络/防火墙架构
查看英文原文
Job Title: Cyber Security Analyst (GRC)
Location: 100% Remote (EST/CST/MST)
Company Overview:
Glint Tech Solutions is a women-owned, global IT staffing and recruiting firm serving enterprise clients across the USA and Canada. We are currently hiring on behalf of a leading healthcare insurance client.
Project Description:
Our client is seeking a Cyber Security Risk Analyst to ensure organizational data remains protected from inappropriate access, disclosure, and damage by assessing, documenting, and socializing risk. This role reports to the Manager, Cybersecurity Risk and Compliance.
Key Responsibilities:
- Support the Cybersecurity Risk Management program, guiding a diverse technical team and collaborating across risk-related teams
- Partner with TPRM, Procurement, Legal, and business stakeholders on continuous monitoring efforts
- Assess cybersecurity controls, identify gaps, and manage mitigation strategies to closure
- Conduct risk assessments evaluating security practices, data handling procedures, and regulatory compliance (HIPAA, PCI, GDPR)
- Prepare detailed risk assessment reports and maintain a comprehensive repository of documentation
- Design, implement, and integrate security solutions to address enterprise risks
- Develop Information Security Risk Metrics (KPIs/KRIs) to support the analytics team
- Support NIST, FedRAMP, and HIPAA compliance efforts including assessment readiness, POA&M management, and continuous monitoring
Mandatory Skills:
- One or more certifications: CISSP, CEH, CTIA, CAP, or EnCase Certified Examiner
- Bachelor's Degree in Computer Science, Cyber Security, IT, or related field (or 4 additional years of experience in lieu of degree)
- 5+ years of cybersecurity experience, specifically in Risk Management, with 3rd party/supplier risk assessment knowledge
- Experience with eGRC platforms (HyperProof, Archer, or ServiceNow GRC)
- Strong understanding of NIST Risk Management Framework and FAIR quantitative model
- Ability to develop and socialize security policies, standards, and procedures
- Knowledge of HIPAA/PHI security standards and network/firewall architecture
Nice-to-Have Skills:
- SOC Reporting / HITRUST knowledge
- Diverse background in cloud (off-prem) platforms
- Experience within the healthcare insurance/payor industry
Originally posted on Himalayas