Lead Risk Analyst

Job Profile Summary Position Purpose: Leads with the overall enterprise-wide effectiveness and efficiency of the organization's IT security and risk activities by ensuring that high levels of security and risk analysis are maintained. Supports regulatory compliance efforts and supports designing of the information technology environment leveraging industry best practices for best-in-class security and appropriate risk mitigation. Education/Experience: A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and requires 5 – 7 years of related experience. Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position. Technical Skills: One or more of the following skills are desired. Knowledge of Other: 27001, HIPAA, Sarbanes-Oxley Act, PCI-DSS and other related state requirements. Soft Skills: Intermediate - Seeks to acquire knowledge in area of specialty; Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions; Intermediate - Ability to work independently; Intermediate - Demonstrated analytical skills; Intermediate - Demonstrated project management skills; Intermediate - Demonstrates a high level of accuracy, even under pressure; Intermediate - Demonstrates excellent judgment and decision making skills; Intermediate - Ability to communicate and make recommendations to upper management; Intermediate - Ability to drive multiple projects to successful completion; Intermediate - Possesses technical aptitude. License/Certification: Certified Information Systems Auditor (CISA) preferred.

Responsibilities

Control documentation; Process documentation; Gap documentation; Remediation documentation; Interviews with control owners; Proactive documentation meets all defined deadlines without delay; Proactively takes on more without waiting for instruction; Communicate clearly and effectively; Lead meetings and initiatives; Follow the set direction of leadership; Lead with overall enterprise-wide effectiveness and efficiency of the organization's IT security and risk activities; Support regulatory compliance efforts; Support designing of the information technology environment leveraging industry best practices

Requirements

Bachelor's degree in a quantitative or business field; 7+ years of related experience; Experience with NIST; Experience with SOC 2; Project leadership; Great communication skills; Ability to work independently; Ability to drive decisions instead of waiting for direction; Friendly and collaborative demeanor

Nice to have

CISA certification; Team player; ISO 27001; HIPAA; Sarbanes-Oxley Act; PCI-DSS

Benefits

Weekly Direct Deposit; 401K Matching; Competitive medical, dental and vision insurance; Consistent communication throughout your project; ZeekTek Referral Program