This job is closed
We regret to inform you that the job you were interested in has been closed. Although this specific position is no longer available, we encourage you to continue exploring other opportunities on our job board.
Cybersecurity Sr Analyst Risk Assessment
CommonSpirit Health - Englewood, CO
posted 2 months ago
About the position
The Cybersecurity Senior Risk Assessment Analyst position at CommonSpirit Health is designed to support the Governance, Risk, and Compliance program's risk assessment team. This role focuses on cybersecurity risk and governance, including vendor security risk assessments, application/software security risk assessments, and medical device security reviews. The analyst will report to the Manager of Governance, Risk, and Compliance and will be responsible for performing risk assessments on various solutions and communicating the associated risks to business partners and stakeholders.
Responsibilities
- Perform intermediate and advanced vendor, biomedical device, and application security risk assessments and related tasks.
- Participate in risk assessment program strategy design and lead risk assessment initiatives.
- Identify, score, document, and report on cybersecurity risks identified during the assessment process.
- Contribute to the administration, maintenance, and improvements of CommonSpirit Health's risk assessment program.
- Act as an escalation point for risk assessments.
- Identify and drive process improvement.
- Collaborate with both internal and external stakeholders.
- Perform other job duties as required.
Requirements
- Bachelor's degree preferred.
- 4-5 years of cybersecurity risk assessment or audit experience required.
- Experience with security tools such as Rapid7, Splunk, and similar.
- Knowledge of architecture security concepts, application security requirements and controls, and secure coding practices (e.g., OWASP).
- Familiarity with security frameworks and compliance standards (e.g., CIS, NIST, ISO 27001, HITRUST).
- ServiceNow experience is a plus.
- Strong analytical and problem-solving skills with attention to detail.
- Excellent communication skills, both written and verbal, with the ability to convey complex security concepts to non-technical stakeholders.
- Ability to work independently and manage multiple tasks effectively.
Benefits
- Health Insurance
- 401K Plan
- Vacation & Paid Time Off
