Lead Risk Analyst (NIST)

Leads with the overall enterprise-wide effectiveness and efficiency of the organization's IT security and risk activities by ensuring that high levels of security and risk analysis are maintained. Supports regulatory compliance efforts and supports designing of the information technology environment leveraging industry best practices for best-in-class security and appropriate risk mitigation.

Education/Experience

• A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and requires 5 7 years of related experience.
• Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.

Technical Skills

One or more of the following skills are desired:

• Knowledge of Other: 27001, HIPAA, Sarbanes-Oxley Act, PCI-DSS and other related state requirements.

Soft Skills

• Intermediate - Seeks to acquire knowledge in area of specialty.
• Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions.
• Intermediate - Ability to work independently.
• Intermediate - Demonstrated analytical skills.
• Intermediate - Demonstrated project management skills.
• Intermediate - Demonstrates a high level of accuracy, even under pressure.
• Intermediate - Demonstrates excellent judgment and decision making skills.
• Intermediate - Ability to communicate and make recommendations to upper management.
• Intermediate - Ability to drive multiple projects to successful completion.
• Intermediate - Possesses technical aptitude.

Top 3 Must-Have Skills:

• • Experience with NIST
  • Experience with SOC 2
  • Project Leadership

License/Certification

• Certified Information Systems Auditor (CISA) preferred.

Education/Certification

Required: Bachelor's Degree

Preferred: Not Specified

Experience

• Years of experience required: 7

Disqualifiers

• Inability to articulate in detail will disqualify.
• Inability to communicate very clearly in easy to understand and follow terms will disqualify.
• We are not looking for buzzwords on a resume but substance in the projects that show leadership.
• Not looking for a task doer; must have analytical skills because we cannot provide direction on everything.

Additional Qualities to Look For

• Friendly demeanor.