Information Security Risk Analyst

To enhance the organization's information security risk management program, the full-time remote Information Security Risk Analyst - Intermediate will independently conduct risk analysis, manage risk treatment plans, and ensure compliance with HIPAA and NIST regulations. Key responsibilities Lead and conduct comprehensive information security risk analysis for IT assets, applications, and third-party vendors Evaluate threats and vulnerabilities to ensure alignment with regulatory frameworks and maintain the organization's risk register Collaborate with stakeholders to prioritize and implement remediation efforts while monitoring regulatory changes and emerging risks Required qualifications Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; master's degree preferred 3+ years of experience in cybersecurity, information security risk management, or audit, with healthcare industry experience preferred Demonstrated experience with risk assessment methodologies and familiarity with risk management platforms Strong understanding of regulatory compliance related to HIPAA and NIST standards One or more relevant certifications (CRISC, CISM, CISA) required or must be obtained within 12 months of hire