[Hiring] Security Risk Analyst II @Centene Corporation

Role Description

Design, implement and monitor IT controls for core applications and systems. Analyze IT data to assess risk and improve processes and efficiency.

• Conduct various Risk Assessments of information technology systems and internal processes.
• Recommend controls to mitigate loss of information assets to protect the confidentiality, integrity, and availability of sensitive data while meeting the core organizational mission of Centene.
• This is a remote position within the United States. Candidates must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.
• Assess security risks of systems, applications, processes with emphasis on cybersecurity risks against common control frameworks and regulations including but not limited to HIPAA, NIST, ISO-27001 and make recommendations to mitigate.
• Utilize qualitative and quantitative analysis methods to assess risk and provide outputs to risk stakeholders.
• Design, monitor and evaluate controls for effectiveness and efficiency to mitigate areas of risks based on Centene's defined risk appetite.
• Prepare finalized reports stating identified risks, and their recommended controls for stakeholders to make treatment decisions.
• Prepare and document standard procedures and protocols.
• Review and prepare scheduled audit reports from both internal and external requests.
• Design application and system level controls in adherence to best auditing and security practices.
• Interact with business owners to identify key controls and coordinate appropriate measurement efforts for process improvement.
• Complete optimization reviews and prepare audit reports associated with the completion of scheduled audits.
• Assist with designing the IT environment to conform to relevant industry standards, such as ISO 27001, HIPAA, Sarbanes-Oxley, PCI-DSS and other related state requirements.
• Assist with evaluation of controls against security best practices.
• Serve as primary liaison between auditing bodies, IT security management, compliance and business stakeholders.
• Assist with implementation of department strategy related information systems and technology architecture.
• Performs other duties as assigned.
• Complies with all policies and standards.

Qualifications

• Bachelor's degree in IT, MIS, Accounting, Finance, Business Administration, related field or equivalent experience.
• 3+ years of combined auditing and IT controls design experience.
• Knowledge of IT systems and processes and experience evaluating internal technical control systems required.

Requirements

• CISSP, CRISC, CISA, CISM, FAIR, CPA, or CIA preferred.

Benefits

• Competitive pay.
• Health insurance.
• 401K and stock purchase plans.
• Tuition reimbursement.
• Paid time off plus holidays.
• Flexible approach to work with remote, hybrid, field or office work schedules.
• Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law, including full-time or part-time status.
• Total compensation may also include additional forms of incentives.
• Benefits may be subject to program eligibility.