EITS Security Risk Analyst B EngagementRemote Job

Job43 – EITS Security Risk Analyst B (Engagement)Location: 100% Remote Max Submissions: 5 Proposed Start Date: ASAP Proposed End Date: 06/30/2026Role OverviewServe as a liaison between the CISO"s strategic initiatives and the IT operational teams.Translate business IT risk requirements into technical control specifications.Develop risk metrics for performance measurement and reporting.Coordinate enterprise-level security and risk management efforts.Act as a subject matter expert (SME) on information security and regulatory compliance.Key Responsibilities? Security & Risk ManagementMaintain and enforce the enterprise information security and risk management framework.Conduct risk analysis and develop mitigation strategies.Monitor and assess the enterprise threat landscape.Provide realistic risk reporting to the CISO and leadership teams.Track and document internal risk reviews, assessments, and exceptions using a GRC tool.? Governance & ComplianceDocument and maintain risk governance methodologies, policies, and procedures.Ensure compliance with:HIPAAJoint CommissionDSRIPCOBITState privacy lawsConduct and support internal and external audits (operational, compliance, reputational, security).Serve as SME for EMR and PHI-related security risks.? Risk Assessments & Gap AnalysisPerform enterprise security risk assessments and gap analyses for new technologies and products.Develop and manage risk remediation plans and work plans.Identify information asset owners for data classification initiatives.Support risk exception and risk acceptance documentation processes.? Technical & Cross-Functional CollaborationPartner with enterprise architecture teams to align business, technical, and security requirements.Collaborate with security engineering teams to implement security controls.Facilitate meetings between stakeholders and IT teams.Provide written and verbal reports to leadership and committees (including Operational Risk Committee).Required Qualifications? ExperienceMinimum 7 years of IT experienceAt least 5 years in IT Security Risk Management / Risk Audit / Data Privacy InvestigationMinimum 2 years in a supervisory capacity? Healthcare Industry Expertise (Required)Strong understanding of:EMR systemsPHI data privacyHealthcare regulatory environmentExperience with HIPAA, Joint Commission, CMS regulations? GRC & Security Framework KnowledgeHands-on experience with GRC tools (ServiceNow, Archer, MetricStream preferred)Working knowledge of:NIST CSFHITECHISO 27001/27002PCI DSSCOBIT? Technical SkillsExperience reviewing IT solution requirements and implementing security controlsStrong analytical and risk assessment skillsAbility to design compensating controls for security vulnerabilitiesAbility to assess business impact of security tools and policiesEducation & CertificationsBachelor"s degree in Information Systems or related fieldPreferred Certifications:CISSPCISACRISCOther relevant security certificationsPreferred Soft SkillsHigh integrity and ability to work independentlyStrong communication and reporting skillsAbility to work in fast-moving environmentsExperience participating in special projectsAbility to support various locations and flexible shifts if requiredThanks & RegardsBhanu PrakashDeltaSoft Solutions

Created: 2026-03-10