Review the security controls in place at Milliman global office locations to ensure implementation is in place
Conduct security reviews remotely through video calls or in-person visits to the office being assessed
Prepare comprehensive assessment reports detailing findings and actionable recommendations for IT support and senior management
Oversee remediation efforts, track progress, and follow up with practice offices where ISRs have been conducted
Support and maintain aggregate risk reporting to be delivered to the CISO, CIO, and Audit Committee

7+ years of experience in information technology, information security, and/or information technology/security audit roles
Bachelor's degree in Computer Science or Cyber Security (or equivalent years of relevant professional hands-on work experience)
Excellent English verbal and written communication skills
Experience with information security frameworks and standards, including ISO 27001/2, NIST SP 800-53, and compliance requirements such as HIPAA and HITRUST, GDPR, as well as industry frameworks like SOC 2 and COBIT
Ability to interpret information security data and processes to identify potential compliance issues
Strong technical knowledge of information systems and their security areas such as networking, operating systems, and identity access management
Advanced skills in Microsoft Office applications (e.g., O365, Word, Excel, PowerPoint)
Decision-making and problem-solving skills

Senior Information Security Analyst – Internal Review

Key skills