Hybrid Remote Security Analyst Sr (GRC and Information Security Risk Analyst)

Position Title:

Hybrid Remote Security Analyst Sr (GRC and Information Security Risk Analyst)

Job Description:

Job Title: Security Analyst Sr.

Location: Hybrid Remote | Expected to report onsite as often as 3-10 times/month.

Schedule: 8:00 Am to 5:00 PM EST

You will leverage your in-depth information security knowledge and GRC tools to assess the security posture of vendor environments. You will help to mature the Risk Management security framework and its execution. You will develop, recommend, and implement enterprise information security policies, technical standards, guidelines, procedures, and other elements of an infrastructure necessary to support information security in compliance with established company policies, regulatory requirements, and industry best practice. Responsible for managing the delivery of information and network security systems and/or technology services, which may include server, desktop, software, network, database, helpdesk components.

How you will make an impact:

• Act as SME (Subject Matter Expert) on vendor security risk.
• Conduct third party assessments to validate security controls.
• Drive the maturity of the GRC platform.
• Own and manage quality and business process improvement for vendor related GRC.
• Review and update applicable tools and policy.
• Provides trouble resolution on complex problems and leads implementations for system and network security technologies;
• Develops testing plans to ensure quality of implementation;
• Coordinates and prepares the reporting of data security events and incidents; provides system and network architecture support for information and network security technologies;
• Provides technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards and technologies;
• Represents major upgrades and reconfigurations in change control;
• Design & analyze mix of vendor services meeting business and information security requirements;
• Maintains relationship with key vendors;
• Leads lights on initiatives to consolidate equipment and/or implement business relocations;
• Determine and perform complex configuration changes to meet business and information security requirements;
• Perform capacity analysis;
• Recommend and implement capacity increases;
• Serve as the technical escalation for results of preventative maintenance routines; supervise preventative maintenance;
• Represents infrastructure security support in significant projects and performs the most complex operations and administration tasks;
• Respond to level 3 & 4 change and problem requests without supervision; lead level 1 & 2 incident recoveries and root cause analysis.

Minimum Requirements:

• BA/BS degree in Information System and Computer Science or related field.
• 3+ years combined experience and education in Information Security along with GRC, Policy, or Risk Management.

Preferred Skills, Qualities, and Capabilities:

• Prior Knowledge of Information Security related Frameworks is strongly preferred.
• Experience in Healthcare and/or Finance industries preferred.
• Holds one of the following certifications (or other equivalent): CRISC (Certified in Risk & Information Systems Control); CISSP/HCISSP (Certified Information Systems Security Professional); CISA (Certified Information Systems Auditor).
• Experience providing top-tier support for 3 or more of the information security technology areas: 1) Access Control, 2) Application Security, 3) Business Continuity and Disaster Recovery Planning, 4) Cryptography, 5) Information Security and Risk Management 6) Legal, Regulations, 7) Compliance and Investigations, 8) Operations Security, 9) Physical (Environmental) Security, 10) Security Architecture and Design, 11) Telecommunications and Network Security.
• Excellent analytical, decision-making, and problem-solving skills.
• Excellent communication skills; both written and verbal.
• Detail oriented, organized, and self-motivated.
• 5 years of prior experience in a support & operations or design & engineering role in any of the following areas: access management or network security technologies, servers, networks, Network communications, telecommunications, operating systems, middleware, disaster recovery, collaboration technologies, hardware/software support or other infrastructure services role.

Job Level:

Non-Management Exempt

Workshift:

Job Family:

IFT > IT Security & Compliance

Be part of an Extraordinary Team

Elevance Health is a health company dedicated to improving lives and communities - and making healthcare simpler. A Fortune 20 company with a longstanding history in the healthcare industry, we are looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve. You will thrive in a complex and collaborative environment where you take action and ownership to solve problems and lead change. Do you want to be part of a larger purpose and an evolving, high-performance culture that empowers you to make an impact?

We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few.

The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19. If you are not vaccinated, your offer will be rescinded unless you provide - and Elevance Health approves - a valid religious or medical explanation as to why you are not able to get vaccinated that Elevance Health is able to reasonably accommodate. Elevance Health will also follow all relevant federal, state and local laws.

Elevance Health has been named as a Fortune Great Place To Work in 2022, has been ranked for five years running as one of the 2023 World's Most Admired Companies by Fortune magazine, and is a growing Top 20 Fortune 500 Company. To learn more about our company and apply, please visit us at careers.ElevanceHealth.com. Elevance Health is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process may contact [email protected] for assistance.

We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short- and long-term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few.

The health of our associates and communities is a top priority for Elevance Health. We require all new candidates to become vaccinated against COVID-19. If you are not vaccinated, your offer will be rescinded unless you provide - and Elevance Health approves - a valid religious or medical explanation as to why you are not able to get vaccinated that Elevance Health is able to reasonably accommodate. Elevance Health will also follow all relevant federal, state and local laws.

Elevance Health has been named as a Fortune Great Place To Work in 2021, is ranked as one of the 2021 World's Most Admired Companies among health insurers by Fortune magazine, and a Top 20 Fortune 500 Companies on Diversity and Inclusion. To learn more about our company and apply, please visit us at careers.ElevanceHealth.com. Elevance Health is an Equal Employment Opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process may contact [email protected] for assistance.