SENIOR SECURITY RISK MANAGEMENT COMPLIANCE ANALYST

$120,000 - $160,000/Yr

Montefiore Health System - Yonkers, NY

Full-time - Senior

Yonkers, NY

Ambulatory Health Care Services

About the position

The Security Risk Management Senior Analyst is responsible for ensuring the organization's data security and managing risks, vulnerabilities, and defects according to established policies and best practices. This role involves coordinating the risk management program, communicating with auditors, participating in security audits, and collaborating with business leaders to facilitate risk analysis and management processes.

Responsibilities

• Coordinate and facilitate the risk management program within specified policies, standards, and procedures.
• Communicate with auditors and regulators during compliance and regulatory reviews.
• Participate in information security audits ensuring technical compliance with security-related regulatory requirements (HIPAA, PCI, etc.).
• Collaboratively work with peers to ensure operational excellence.
• Contribute to or help lead risk assessments.
• Identify and prioritize risk based on impact and likelihood.
• Work directly with key business leaders to facilitate information risk analysis and risk management processes, identify acceptable levels of risk, and establish roles and responsibilities regarding information risk management.
• Execute the organization's risk procedures.
• Develop reports and evaluate the results of the vendor assessment.
• Maintain risk registries.
• Maintain and monitor Information Security Risk Exception process to ensure identification of areas of non-compliance.
• Develop key risk indicators and dashboards.
• Assist in Policy/Standard development and security awareness training.

Requirements

• Experience with risk management concepts and processes.
• Familiarity with relevant regulatory requirements.
• Strong interpersonal and oral/written communication skills, able to build relationships at all levels.