Cyber Security Analyst

$99,840 - $110,240/Yr

Cynet Systems - Baltimore, MD

Full-time - Entry Level

Baltimore, MD

Professional, Scientific, and Technical Services

About the position

The Cyber Security Analyst will support the Cybersecurity Risk Management program by providing guidance to a diverse team of cybersecurity specialists. This role involves continuous monitoring, risk assessment, and collaboration with various stakeholders to ensure the security and compliance of the organization's information systems. The analyst will be responsible for identifying cybersecurity gaps, developing mitigation strategies, and preparing detailed risk assessment reports.

Responsibilities

• Support the Cybersecurity Risk Management program and provide guidance to cybersecurity specialists.
• Partner with TPRM, Procurement, Legal, and key business stakeholders for continuous monitoring efforts.
• Assess cybersecurity controls, identify gaps, and assist in developing mitigation strategies.
• Collaborate with internal and external teams to assess, monitor, and manage risks.
• Conduct thorough assessments with business teams to identify potential risks to the organization.
• Evaluate security practices, data handling procedures, and regulatory compliance (e.g., HIPAA, PCI, GDPR).
• Represent Cybersecurity from a Risk Management perspective and execute security risk management leadership.
• Prepare detailed risk assessment reports and maintain a comprehensive repository of all risk assessments.
• Conduct risk analyses to ensure consistency in the risk assessment lifecycle.
• Design, implement, and integrate security solutions to address enterprise risks and exposures.
• Develop and maintain Information Security Risk Metrics supported by KPIs and KRIs.
• Test and report on new technologies to address security concerns and collaborate with the vulnerability management team.
• Support client compliance/risk management efforts in support of NIST, FedRAMP, and HIPAA.

Requirements

• College Degree in Information Security or Technology related field or equivalent experience.
• 3+ years of related work experience in information security.
• High level of expertise in information security concepts and policies.
• In-depth understanding of networking, operating systems, and security technologies.
• Knowledge of vulnerability assessments, incident response, and security policy creation.
• Ability to quickly learn Information Security tools in a complex environment.
• Strong written documentation and technical writing skills.
• Excellent presentation and verbal communication skills.
• Ability to lead and complete tasks with minimal supervision.

Nice-to-haves

• Significant understanding of NIST Risk Management Framework and methodologies.
• Experience with Cybersecurity Governance, Risk, and Compliance (eGRC) Programs.
• Ability to translate technical requirements to the business.
• Specific knowledge of Client business and BlueCross BlueShield corporate structure.
• Proficiency with security controls for cloud environments (Azure and AWS).
• Familiarity with security tools such as vulnerability assessment applications and IDS/IPS.
• Experience working with Information Security tools in a large, complex environment.
• Familiarity with HIPAA Security Rule and compliance requirements.

Benefits

• Competitive pay range of $48/hr to $53/hr