Required skills
- NIST SP 800-53
- NIST SP 800-30
- NIST SP 800-37
- Risk Assessment
- NIST Cybersecurity Framework
- Privacy Framework
- CISSP
- CISM
- Identity and Access Management
- Network Security
- Cryptography
- Information Security
Languages: English
Job description
Project overview
NCDIT - Security Specialist- Mid Level (815891)
221 E Lane St, Raleigh, North Carolina 27601
Project details
Typical Experience: 36-60 months
.
The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the North Carolina Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).
Required Knowledge, Skills, and Abilities
Minimum Education and Experience
Required Qualifications
Preferred Qualifications
Job Facts: Contract W2 | Contract Corp To Corp | Remote
Skills: CISM, CISSP, NIST, Risk Assessments, Identity and Access Management, Information Security, Risk Assessment, Network Security, Inventory, Cryptography
Reference: Dice Id: RTX1bee1d | Position Id: 2026-2933
- Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.
- Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
- Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
- Ability to prioritize and summarize risk assessment status to project managers and executive leadership.
- Bachelor s degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR
- Associate degree in Computer Science or a related IT field and three years of progressive experience; OR
- An equivalent combination of education and experience
- Professional certifications such as CISSP or CISM.
- Experience performing NIST 800-53 based risk assessments.
- Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework
- Experience completing HITRUST risk assessments.
- Start: flexible
- Remote: remote
- Location: NC, US, US
- Languages: English
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on Dice