Security Risk Analyst II

Centene Corporation is a healthcare organization focused on improving access to care and supporting healthier lives. The Security Risk Analyst II will design, implement, and monitor IT controls, assess cybersecurity and technology risks, and prepare reports and recommendations to protect sensitive information and improve processes.

Responsibilities:

• Assess security risks of systems, applications, processes with emphasis on cybersecurity risks against common control frameworks and regulations including but not limited to HIPAA, NIST, ISO-27001 and make recommendations to mitigate
• Utilize qualitative and quantitative analysis methods to assess risk and provide outputs to risk stakeholders
• Design, monitor and evaluate controls for effectiveness and efficiency to mitigate areas of risks based on Centene's defined risk appetite
• Prepare finalized reports stating identified risks, and their recommended controls for stakeholders to make treatment decisions. Prepare and document standard procedures and protocols
• Review and prepare scheduled audit reports from both internal and external requests
• Design application and system level controls in adherence to best auditing and security practices
• Interact with business owners to identify key controls and coordinate appropriate measurement efforts for process improvement
• Complete optimization reviews and prepare audit reports associated with the completion of scheduled audits
• Assist with designing the IT environment to conform to relevant industry standards, such as ISO 27001, HIPAA, Sarbanes-Oxley, PCI-DSS and other related state requirements
• Assist with evaluation of controls against security best practices
• Serve as primary liaison between auditing bodies, IT security management, compliance and business stakeholders
• Assist with implementation of department strategy related information systems and technology architecture
• Performs other duties as assigned
• Complies with all policies and standards

Requirements:

• Candidates must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future
• Bachelor's degree in IT, MIS, Accounting, Finance, Business Administration, related field or equivalent experience
• 3+ years of combined auditing and IT controls design experience
• Knowledge of IT systems and processes and experience evaluating internal technical control systems required
• CISSP, CRISC, CISA, CISM, FAIR, CPA, or CIA preferred