Information Security Governance Analyst

$83,200 - $97,760/Yr

Insight Global - Norfolk, VA

Full-time - Mid Level

Remote - Norfolk, VA

Administrative and Support Services

About the position

The Information Security Governance Analyst will play a crucial role in managing the development, implementation, and maintenance of the information security governance framework and program for a major healthcare client. This fully remote position requires a strong understanding of information security principles and frameworks to ensure the confidentiality, integrity, and availability of information assets. The role involves collaboration with cross-functional teams and support for compliance and audit processes.

Responsibilities

• Assist in the development and maintenance of information security policies, standards, and processes in alignment with industry regulations and best practices.
• Assist in control validation activities with a deep understanding of security control frameworks and their alignment with security policy.
• Support the implementation and enforcement of the information security governance framework, including risk management processes, controls, and metrics.
• Conduct regular reviews and assessments of existing security controls and governance processes to identify gaps, weaknesses, and areas for improvement.
• Collaborate with cross-functional teams to ensure that information security requirements are integrated into business processes and technology solutions.
• Monitor regulatory developments and industry trends related to information security governance to ensure ongoing compliance and adaptation of policies and procedures.
• Provide support for internal and external audits, assessments, and compliance reviews, including the preparation of documentation and evidence as required.
• Support the RFP and Customer Due Diligence processes, managing data repositories of control evidence.
• Assist in the development and maintenance of security-related metrics and reports to track the effectiveness of information security governance initiatives.
• Stay current with emerging threats, vulnerabilities, and technologies to ensure that information security governance practices remain effective and relevant.

Requirements

• 4-5 years of experience in information security governance, risk management, or compliance roles
• Extensive experience in writing Policies, Standards, Process & Procedure documents
• Strong understanding of information security principles, frameworks, and best practices (e.g., ISO 27001, NIST Cybersecurity Framework)
• Ability to carry out the governance process and provide timely reporting and updates to management
• Ability to understand different control frameworks, and work with consolidated frameworks to implement controls
• Experience with conducting security risk assessments, audits, and compliance reviews
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels of the organization
• CISSP, CRISC, or equivalent professional certifications
• Experience in healthcare industry
• Experience in highly regulated environment
• Bachelor's degree in information security, computer science, or related field

Benefits

• Fully remote position
• Competitive pay range of $40-$47/hr
• Conversion salary range of $85,000 to $90,000
• Opportunity for contract-to-hire