Insight Global
Cybersecurity Risk Analyst
Insight Global is looking for a highly motivated and experienced Cybersecurity Risk Analyst to support one of our largest healthcare clients on a fully remote 6-month contract-to-hire. The ideal candidate will be comfortable engaging with stakeholders across various business units, capable of independently guiding teams through risk rating and remediation processes and experienced in handling policy exceptions and drafting procedural documentation. Familiarity with platforms like ServiceNow for risk management and program building, and a solid understanding of regulations such as HIPAAincluding experience with HIPAA Security Assessments or Health Industry Cybersecurity Practices (HICP) assessmentsis preferred. Responsibilities include but are not limited to: Conduct comprehensive risk assessments across applications, systems, and enterprise-wide initiatives to identify potential threats, vulnerabilities, and their impact on confidentiality, integrity, and availability of data. Lead or support the execution of HIPAA Security Risk Assessments (SRA) and/or HICP assessments, including documenting findings, recommending corrective actions, and ensuring ongoing compliance. Independently conduct risk rating for issues using ISO, COBIT, NIST frameworks in partnership with other stakeholders. Additionally, guide and facilitate diverse business units in performing their own risk ratings to help them understand risk implications and remediation priorities. Collaborate with the stakeholders in developing and implementing risk mitigation strategies aligned with industry standards and best practices such as NIST, ISO 27001, and HIPAA. Utilize Governance, Risk, and Compliance (GRC) toolsspecifically ServiceNowto manage risk registers, track remediation plans, automate workflows, and generate reports on risk status and compliance metrics. Manage and oversee policy exception processes, including documentation, risk analysis, and tracking. Stay current with the evolving threat landscape, regulatory changes, and emerging cybersecurity technologies to proactively identify and address potential risks. Contribute to the continuous improvement of the organization's risk management program and cybersecurity posture. Draft clear and actionable procedure documents and other risk-related documentation to support policy implementation and operational consistency. Develop and deliver training and awareness programs to educate employees on cybersecurity risks, policies, and best practices. Participate in incident response activities, providing risk analysis and remediation support as needed. Compensation while on contract: $35/hr - $55/hr Conversion salary range: $80k-$110k
Insight Global is looking for a highly motivated and experienced Cybersecurity Risk Analyst to support one of our largest healthcare clients on a fully remote 6-month contract-to-hire. The ideal candidate will be comfortable engaging with stakeholders across various business units, capable of independently guiding teams through risk rating and remediation processes and experienced in handling policy exceptions and drafting procedural documentation. Familiarity with platforms like ServiceNow for risk management and program building, and a solid understanding of regulations such as HIPAAincluding experience with HIPAA Security Assessments or Health Industry Cybersecurity Practices (HICP) assessmentsis preferred. Responsibilities include but are not limited to: Conduct comprehensive risk assessments across applications, systems, and enterprise-wide initiatives to identify potential threats, vulnerabilities, and their impact on confidentiality, integrity, and availability of data. Lead or support the execution of HIPAA Security Risk Assessments (SRA) and/or HICP assessments, including documenting findings, recommending corrective actions, and ensuring ongoing compliance. Independently conduct risk rating for issues using ISO, COBIT, NIST frameworks in partnership with other stakeholders. Additionally, guide and facilitate diverse business units in performing their own risk ratings to help them understand risk implications and remediation priorities. Collaborate with the stakeholders in developing and implementing risk mitigation strategies aligned with industry standards and best practices such as NIST, ISO 27001, and HIPAA. Utilize Governance, Risk, and Compliance (GRC) toolsspecifically ServiceNowto manage risk registers, track remediation plans, automate workflows, and generate reports on risk status and compliance metrics. Manage and oversee policy exception processes, including documentation, risk analysis, and tracking. Stay current with the evolving threat landscape, regulatory changes, and emerging cybersecurity technologies to proactively identify and address potential risks. Contribute to the continuous improvement of the organization's risk management program and cybersecurity posture. Draft clear and actionable procedure documents and other risk-related documentation to support policy implementation and operational consistency. Develop and deliver training and awareness programs to educate employees on cybersecurity risks, policies, and best practices. Participate in incident response activities, providing risk analysis and remediation support as needed. Compensation while on contract: $35/hr - $55/hr Conversion salary range: $80k-$110k