Remote Position || CyberSecurity Risk Analyst @ME at Remote, Remote, USA |
Email: [email protected] |
Direct client position Position : CyberSecurity Risk Analyst Duration : 6 months with extension possible Client : State of Maine (Remote) Agency : OIT Job Description : TOP 3 SKILLS Skill 1 Information Security Skill 2 Project Management Skill 3 Communication and Stakeholder Engagement Key Responsibilities: Risk Assessment and Analysis: Conduct comprehensive information security risk assessments across various State of Maine agencies. Identify, assess, and measure risks in systems, applications, technical environments, networks, and workflows. Clearly document vulnerabilities, including their potential impact, likelihood of exploitation and affected areas. Prepare detailed risk assessment reports to guide management actions on identified risks. Risk Mitigation and Compliance: Compare current security measures against regulatory expectations and assess the effectiveness of security controls. Collaborate with stakeholders to develop mitigation plans to reduce risks to acceptable levels. Provide consultative advice for the development and implementation of risk response plans. Evaluate and recommend improvements in policies, processes, and standards to bridge security gaps. Stakeholder Engagement and Program Development: Manage relationships with business partners and lead discussions on information security risks and mitigation strategies. Assist in the development and deployment of training materials to promote compliance and risk awareness. Contribute to the development of operational practices, procedures, and activities supporting the Risk Management Program initiatives. KNOWLEDGES, SKILLS, AND ABILITIES REQUIRED: Strong understanding of information security principles, concepts, and best practices. Expertise in risk assessment processes for information technology systems. Knowledge of security frameworks and standards (e.g., NIST Cybersecurity Framework, CIS Controls) Knowledge of Industry Compliance Standards (e.g., HIPAA, IRS Pub1075, CMS, PCI, CJIS, Social Security Administration) Ability to analyze technical vulnerabilities and assess their impact on security. Ability to create comprehensive risk assessment reports and present findings to stakeholders. Ability to manage risk assessment projects, set priorities, and meet deadlines. Ability to make decisions, use discretion and display sound judgment. Effective written and oral communication skills. Ability to develop plans, policies, and procedures that meet regulatory compliance requirements. MINIMUM QUALIFICATIONS: Demonstrated experience in risk management, including the capability to effectively document and present risk assessment findings, proficiency in understanding and applying information security principles, and knowledge of relevant laws and policies. Thanks, PRATIIK DESHMUUKH TECHNICAL RECRUITER Mail: [email protected], www.technixonline.com Direct: 480-389-2903 Phoenix, AZ, 85050 Technix LLC | Phoenix, AZ | phoenix, AZ 85050 US | Update Profile | Constant Contact Data Notice Keywords: Arizona Remote Position || CyberSecurity Risk Analyst @ME [email protected] |
[email protected] View all |
Thu Jul 25 21:15:00 UTC 2024 |