Cybersecurity Risk Analyst ( Remote )

$83,430 - $222,480/Yr

CVS Health Federal Contractor - Helena, MT

Full-time - Mid Level

Remote - Helena, MT

About the position

The Cybersecurity Risk Analyst at CVS Health is responsible for enhancing the cybersecurity maturity of third parties through continuous monitoring and risk analysis. This role involves collaboration with various internal teams and external contacts to identify and manage cybersecurity risks, ensuring effective resolution and awareness of potential threats. The position supports the growth of the continuous monitoring program, aiming to proactively engage with third parties to mitigate risks before they materialize.

Responsibilities

• Work with SOC, lines of business, and third-party contacts to facilitate continuous monitoring actions.
• Identify and analyze risks through the CVS Health continuous monitoring program.
• Collaborate with internal organizations regarding third-party outreach and event management.
• Manage, monitor, and coordinate resolution of cybersecurity events to ensure risk reduction.
• Drive proactive engagement and education on security topics with third parties.

Requirements

• 3+ years of experience in an IT Security/IT Risk environment with a large regulated organization.
• 3+ years of experience in risk assessment methodologies and IT/IS Policies and Standards.
• 3+ years of experience managing vendor assessments.
• 3+ years of experience with development and administration of risk assessments and reviews.
• 3+ years of experience with cybersecurity assessment processes and disciplines.
• 3+ years of experience in multiple IT disciplines (distributed computing, networks, application design, IT security, business recovery).

Nice-to-haves

• Previous cybersecurity risk assessment experience within Healthcare or other regulated environments.
• Experience with regulatory requirements such as HIPAA and PCI-DSS.
• Knowledge of Information Security frameworks like ISO27001 and NIST CSF.
• Background in Cloud, AI, or other IT/IS areas.
• Strong interpersonal and communication skills for relationship building.
• Knowledge of web application security testing and vulnerability testing tools.
• Experience with network-level penetration testing and source code reviews.

Benefits

• Medical, dental, and vision benefits.
• 401(k) retirement savings plan.
• Employee Stock Purchase Plan.
• Fully-paid term life insurance.
• Short-term and long-term disability benefits.
• Well-being programs and education assistance.
• Free development courses.
• CVS store discount and partner discount programs.
• Paid Time Off (PTO) and paid holidays.