IT Security & Risk Analyst

Company: CoSourcing Partners
Location: Boise
Posted on: February 14, 2020

Job Description:

IT Security & Risk Analyst The IT Security & Risk Analyst will to perform an Information Security Risk Assessment by performing an in-depth review of the existing information security posture based on information gathered from the Security Manager and CISO while leveraging the results and industry best practices to maintain and monitor the existing Risk Register, prepare Recommendations and Top 10 Security Risks Platform for improving the information security posture of our client. The Top 10 Security Risks Platform is the ultimate deliverable for this engagement. Responsibilities Perform an in-depth review of the as-is environment, identifying threat and attack vectors, and analyzing impacts and risks to our client. Define high level milestones for the full length of the engagement; Define whether and to what technical assessments will be required; Draft agendas for each facilitated session; Define the key people required and the expected deliverables; Risk Assessment will include the following areas of importance: Information Security Governance and Compliance Information Security Strategy; Information Security Policies and Procedures; Information Security Risk Management; and Information Security Metrics Reporting Experience working with the Processes to Follow: Identify and Access Management; Information Classification and Handling; Threat and Vulnerability Management; Information Security Incident Management; Certification and Accreditation; Asset Management and Audit and Assessment Experience Executing the Following Daily: The identification of policy, process, personnel and technical vulnerabilities with asset and criticality details based on the risk analysis; An evaluation of the risk level for each critical asset deemed vulnerable and subject to specific threats; The identification of existing and proposed safeguards, and an assessment of their adequacy; The identification and assessment of residual risks that need to be addressed; Risk prioritization; An analysis of the consequences/impact of the potential threats, and an emulation of the likelihood of occurrence - provided by Dice

Keywords: CoSourcing Partners, Boise , IT Security & Risk Analyst, Professions , Boise, Idaho