Security Risk Assessor

Description:
We are looking for folks who should be an enterprise architect for at least 5+ years and then moved into security. He/she should be able to build/develop applications and make them secure. He/She should be very technical. They should have developed applications in the cloud and on-prem and then becomes security experts Please revisit all your submitted candidates and qualify them as per need and let me know the candidates name will schedule internal discussions tomorrow or else look for additional profiles based on feedback.
Client: Point32Health Plan
Location: Canton, MA(Remote)
Day to Day job Duties: (what this person will do on a daily/weekly basis)
" Providing advanced information security consultation for all aspects of information security, compliance, policy, risk management, and remediation
" Identifying process improvements and developing plans to meet or exceed security best practices
" Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise s devices, servers, and other systems and data repositories.
" Conduct risk assessments on various applications, systems, infrastructure, cloud-environments, and third-party arrangements. Document identified risk through a risk report to be effectively communicated shared with business and/or technical leadership
" Confidently represent the Cyber & Information Security risk assessment services function with reviewing and assessing contracts, application designs, integration plans, etc.
" Create documentation in support of the risk assessment services team
" Self-directed; expected to identify and lead efforts to correct security controls and/or process improvements
" Explain complex technical issues to non-technical colleagues and business executives
" Troubleshoot and independently solve problems as they arise
Basic Qualifications: (what are the skills required to this job with minimum years of experience on each)
" Min 5+ year of experience in at least 4 of these or similar disciplines: IT governance and operations; access control analysis; incident response; data analysis and auditing controls; data protection; advance threat protection; identity and access management; integrated technologies with cross-functional impact
" Minimum 5+ year of experience with risk assessment frameworks
" Broad knowledge of commonly used information security concepts, best practices, and standard
" Strong collaboration, facilitation, and negotiation skills.
" Strong communication skills, both written and verbal.
" Familiarity with HIPAA Security Rule and other regulatory requirements
" Proven analytical and problem-solving abilities
" Project and program management planning and organizational skills
" Customer service focused
" Time management and prioritization
Nice to Have; (But not a must)
Hands on Experience on Hands on Security Tools