Info Security Risk Analyst (Security/Auditing Assessment)

Primary Responsibilities

• Lead third-party assessments and follow-up activities with strategic third-party relationships
• Communicate professionally with third-party stakeholders/end users through multiple communication methods, building trusting relationships
• Understand and enforce General Computing Controls of third-party organization structure
• Identify security administration deficiencies, recommend improvements, and assist to implement corrective action
• Develop and maintain procedure documentation
• Execution of reporting (Daily/Weekly/Monthly)

Top responsibilities for this position:

• Understand and scope properly third-party organization structure to apply necessary controls to be assessed
• Perform and manage control/risk assessment and remediation of identified findings as per process documents
• Ensure third-party compliance to the business agreement, policies, procedures, & regulations along with ability to map controls and compliance requirements
• Review third-party supplied policies & procedures, internal/external assessment reports, agreements and provide feedback
• Executive summaries with recommendations & direction regarding remediation efforts and disposition of the third party
• Communicate, escalate, and track third-party remediation progress on assessment remediation activities
• Understand information security risks that are inherent to a business and articulate those risks in business terms
• Maintain current knowledge on information security topics and their applicability program requirements
• Engage onshore leadership regarding any escalation/delays/deviations during assessment/remediation
• Software tools/skills needed:
• Advance level experience in Microsoft 365 (Excel, Word, PowerPoint, etc.)

Job Qualifications

• Undergraduate degree or equivalent experience.

• What skills/attributes are a must have:

  • Experience in auditing/security assessments
  • Experience working with senior levels of management
  • Strong Listening, Communication, and Presentation Skills
  • Good follow-up skills and detail oriented
  • Security expertise including knowledge on different security risk assessment frameworks (NIST), standards (ISO27001/HITRUST/ITIL/COBIT), and act such as (HIPAA/GLBA).
  • Experience in examining the SSAE 16 Audit, SOC 2, PCI DSS, NY Cyber Security and other security audit report

• Knowledge and understanding of different security products (web/email filtering, disk encryption, vulnerability testing, antivirus, DLP, firewall etc.)

• Knowledge on technology/software development methodologies, application security, and OWASP Top 10 guidelines

• Ability to document assessment work papers and preparing assessment report

• Ability to manage third-party assessment independently with minimal supervision

  Preferred:
  CISA, CISSP, CRISC, ISO 27001, Security+, ISC2 CC

WHAT WE OFFER

• Hybrid
• Laptop/Computer Provided by the Company
• Market Total Rewards Package
• Retirement Plan
• Medical Plan (HMO) from Day 1 of employment
• Dental, Medical, and Optical Reimbursements
• Life and Disability Insurance
• Paid Time-Off Benefits
• Sick Leave Conversion
• Tuition Fee Reimbursement
• Employee Assistance Program (EAP)
• Annual Performance Based Merit Increases
• Employee Recognition
• Training and Staff Development
• Employee Referral Program
• Employee Volunteerism Opportunity
• All Mandatory Statutory Benefits

Who we are

• Optumis the health care technology and innovation company of the UnitedHealth Group enterprise along with UnitedHealthcare.
• UnitedHealth Groupis a health care and well-being company with a mission to help people live healthier lives and help make the health system work better for everyone.
• We’re a leading health solution and care delivery organization. Our work is complex, but our mission is simple: create a healthier world, with you at the center.
• As part of a Fortune 5 enterprise, we are improving the health care experience of over 125 million people around the world.
• Elevate your career with a leading health care company while improving lives.