Associate Information Security Analyst - Enhanced Vendor Oversight

Schedule: Hybrid

Compensation: $73,000 - $110,000

Jump into the new world of health insurance:

At Blue Cross & Blue Shield of Rhode Island (BCBSRI), our business is healthcare. But our focus is on improving lives. Be part of a team that's large enough to make a difference but small enough to be innovative. Work in a rapidly changing field. Take a chance to be creative. Move outside the status quo. Shape new ideas with the power of a national brand behind you.

Why this job matters:

Blue Cross & Blue Shield of Rhode Island is seeking an innovative and diligent security professional to join its Information Security team. In this role, a successful candidate will be pivotal in ensuring the security, compliance, and maintenance of our third-party relationships. A successful candidate will be responsible for assessing, monitoring, and mitigating risks associated with third-party vendors and delegates. Additionally, a successful candidate will be required to interact with business units to communicate risks and manage review cycles effectively.

What you'll do:

• Conduct security assessments of third-party vendors to identify potential risks and vulnerabilities.
• Collaborate with internal stakeholders to align third-party security practices with company policies and regulatory requirements.
• Review and analyze third-party attestation and certification artifacts (SOC2, HITRUST, etc.) shared by third parties to identify information security risks.
• Develop and maintain documentation related to third-party risk management activities.
• Maintain an organization-wide vendor portfolio for security risks and engagement forms.
• Provide recommendations for mitigating identified risks and improving third-party security posture.
• Stay informed about industry best practices and emerging threats related to third-party risk management.

What you'll need to succeed:

• Equivalent combination of education and work experience
• 3+ years of relevant industry experience ideally focused in vendor management, third-party risk management, or related enhanced vendor oversight tasks.
• Relevant certifications are preferred, such as CISSP, CISA, CRISC, or equivalent, but are not required.
• Advanced knowledge of Microsoft Office; including Outlook, Word, Excel, and PowerPoint.
• Strong analytical and organizational skills.
• Effective oral and written communication skills.
• Must be a self-driven, team player.
• Ability to work independently and as part of a team.
• Knowledge of healthcare industry regulations and standards is a plus.