21 information security risk auditor jobs found in New York, NY

Experis Healthcare Solutions supports the healthcare industry - payer, provider, and vendor - with expertise across the entire IT organization. Our adaptable delivery model allows us to help our clients meet their talent needs with permanent, contract, or contract-to-hire resources, supplementing teams with specific subject matter expertise, or complete outsourced solutions. We have supported key programs at all levels, from program and project management to leads and individual certified analysts and more. We are currently seeking someone to join our team. Please see the job description below and apply if you meet the requirements. Job Title : Senior Auditor - IT Security Work Address: Remote work, live anywhere in the US Job Type: Contract to Hire Start Date: ASAP Project Description: The Sr. Auditor helps protect computers, networks, and data against security threats, and helps orchestrate the security incident response activities. Day To Day: Develops...

In this role, you will: Lead complex initiatives designed to mitigate current and emerging risks with broad impact Act as key participant in monitoring, evaluating, and measuring the impact of decisions practiced in Control Management functional area Monitor moderately complex business specific programs, and provide risk management consulting to support the business in designing and implementing risk-mitigation strategies Monitor, measure, evaluate, and report on the impact of decisions and controls to the relevant business group or functional area Develop and implement risk monitoring and risk reporting processes and controls Collaborate with relevant business group to identify current and emerging risks associated with business activities and operations, and provide guidance in developing and implementing risk-mitigating strategies Lead Control Management project or virtual teams Required Qualifications: 5+ years of Risk Management...

The Senior Information Security Analyst will implement and support Segal's Information Security Program. The role will interface with colleagues throughout the organization including the Technology and Security Services group within IT, as well as IT Applications. In addition, the Information Security Analyst will collaborate with, and serve as a resource and advisor to Segal's Data Security Committee and its members, and to Segal as a whole. Responsibilities: Support Segal’s Access Management Program initiatives and evolution. Support Segal’s Vendor Risk Management Program initiatives and evolution. Interface with clients as warrented to represent Segal’s Information Security program and capabilities in correlation to client requirements. Coordinate and track Information Security related third party audits and assessments (e.g. SOC2, HIPAA Security Rule Compliance, penetration and vulnerability tests) including scope of audits, timelines, and outcomes. Generate and...

Combine two of the fastest-growing fields on the planet with a culture of performance, collaboration and opportunity and this is what you get. Leading edge technology in an industry that's improving the lives of millions. Here, innovation isn't about another gadget, it's about making health care data available wherever and whenever people need it, safely and reliably. There's no room for error. Join us and start doing your life's best work.(sm) The Sr. Information Security Engineer – IAM SSO will be part of the Web Access Management team (WAM) in the Optum Technology Information Risk Management Division (IRM). The WAM team is focused on integrating customers (internal and external to Optum/UHC) with the appropriate security tools for authenticating users with applications. The primary role of the Engineer is to design, configure and support access management solutions in accordance with our operating guidelines and security practices. This is an individual...

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Come make an impact on the communities we serve as we help advance health equity on a global scale. Here, you will find talented peers, comprehensive benefits, a culture guided by diversity and inclusion, career growth opportunities and your life's best work.(sm) General Security Engineering: Making critical decisions on enterprise security policies Reporting and reviewing the compliance status and taking remediation actions Understanding of network security best practices and standards through auditing, policy analysis, firewall request review and processing Implement suggested solutions and innovative approaches to complex issues, as well as complex conceptual analysis,...

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Come make an impact on the communities we serve as we help advance health equity on a global scale. Here, you will find talented peers, comprehensive benefits, a culture guided by diversity and inclusion, career growth opportunities and your life's best work.(sm) Primary Responsibilities: Dedicated security lead for specific lines of business, and consultatively assists the business with customer RFx’s, targeted security assessment, control framework mapping and validation (e.g. System Security Plan (SSP) & International Standards Organization (ISO)), contracts, audits, proactive incident response support and related business support Subject matter experts / technical...

The Segment Information Security Officer (SISO) is responsible for overseeing the segment information risk management program and supports Enterprise Information Security (EIS) processes and programs.  The SISO is an EIS process expert and acts as a central point of contact for security process issues and questions.  The SISO is deemed a critical integration point with business leadership teams and is considered a change agent for the business in understanding security risks and the role and responsibilities of EIS, as well as ensuring that EIS fully understands and is engaged to support the needs and objectives of the business.  The SISO provides management and strategic support, reports to the Business Information Security Officer (BISO) and works as a delegate of EIS. Major Responsibilities Assist in enterprise and EIS risk management processes and execution. Partner with segment technology and business leadership to guide segment-level risk management and...

In this role, you will: Lead complex initiatives designed to mitigate current and emerging risks with broad impact Act as key participant in monitoring, evaluating, and measuring the impact of decisions practiced in Control Management functional area Monitor moderately complex business specific programs, and provide risk management consulting to support the business in designing and implementing risk-mitigation strategies Monitor, measure, evaluate, and report on the impact of decisions and controls to the relevant business group or functional area Develop and implement risk monitoring and risk reporting processes and controls Collaborate with relevant business group to identify current and emerging risks associated with business activities and operations, and provide guidance in developing and implementing risk-mitigating strategies Lead Control Management project or virtual teams Required Qualifications: 5+ years of Risk Management...

About this role: The Enterprise Data Loss Prevention (EDLP) Innovation team Lead Information Security Analyst is a key role supporting our mission to prevent inappropriate external sharing and distribution of sensitive company, customer and employee information. Responsibilities include, but aren't limited to: - Designing, implementing and tuning rules and techniques to prevent risky user behaviors in partnership with security, investigative partners, business groups and other stakeholders. - Lead and support enterprise transition to next-generation cloud-based DLP solutions. - Lead and support ongoing rule/technique change management and associated controls execution. - Assist with inquiries from risk partners, Internal Audit and regulatory bodies on EDLP controls and procedures. In this role, you will: Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation...

The Segment Information Security Officer (SISO) is responsible for overseeing the segment information risk management program and supports Enterprise Information Security (EIS) processes and programs.  The SISO is an EIS process expert and acts as a central point of contact for security process issues and questions.  The SISO is deemed a critical integration point with business leadership teams and is considered a change agent for the business in understanding security risks and the role and responsibilities of EIS, as well as ensuring that EIS fully understands and is engaged to support the needs and objectives of the business.  The SISO provides management and strategic support, reports to the Business Information Security Officer (BISO) and works as a delegate of EIS. Major Responsibilities Assist in enterprise and EIS risk management processes and execution. Partner with segment technology and business leadership to guide segment-level risk management and...

Combine two of the fastest-growing fields on the planet with a culture of performance, collaboration and opportunity and this is what you get. Leading edge technology in an industry that's improving the lives of millions. Here, innovation isn't about another gadget, it's about making health care data available wherever and whenever people need it, safely and reliably. There's no room for error. Join us and start doing your life's best work.(sm)  This position is responsible for leading cross functional teams within the Enterprise Resilience (ER) function within Enterprise Information Security (EIS).  The ER function is an enterprise function, serving all businesses across UHG, UHC, and Optum.  It is comprised of three core functions (Business Continuity, Disaster Recovery, and Crisis Management).   The Enterprise Resilience organization ensures that all enterprise businesses have current and effective business continuity and technology disaster recovery plans in place for both...

Maintain the firm's ISO 27001 information security program and preparing for client audits. The analyst will be involved in administering the firm's third-party risk management, vulnerability management, IT risk management, security awareness, and incident response activities. Client Details A New York City based law firm with 400 attorneys working in their five offices spanning three different countries. Description -Assist in all aspects of Information Security, Data Privacy Compliance, Information Governance Coordination, and Information Risk Auditing, including Client Audits, Internal, External and Vendor assessments. -Define and maintain the information security policies and procedures. -Work with internal audit and other stakeholders on security assessments, compliance matters and audits. -Assist in the security - related planning for all future IT strategic initiatives. -Maintain the practice of continuous improvement and education. Profile -3+ years of...

In this role, you will: Lead complex initiatives designed to mitigate current and emerging risks with broad impact Act as key participant in monitoring, evaluating, and measuring the impact of decisions practiced in Control Management functional area Monitor moderately complex business specific programs, and provide risk management consulting to support the business in designing and implementing risk-mitigation strategies Monitor, measure, evaluate, and report on the impact of decisions and controls to the relevant business group or functional area Develop and implement risk monitoring and risk reporting processes and controls Collaborate with relevant business group to identify current and emerging risks associated with business activities and operations, and provide guidance in developing and implementing risk-mitigating strategies Lead Control Management project or virtual teams Required Qualifications: 5+ years of Risk Management...

Job Description The Enterprise Functions Technology (EFT) group provides technology solutions and support for Risk, Audit, Finance, Marketing, Human Resources, Corporate Properties, and Stakeholder Relations business lines. In addition, EFT provides unique technology solutions and innovation for Wells Fargo Technology, Enterprise Shared Services, and Enterprise Data Management. This combined portfolio of applications and tools are continually engineered to meet the challenges of stability, security, scalability, and speed. Within EFT, the Cyber Hygiene Technology team is seeking a Senior ServiceNow Engineer (Senior Software Engineer) to implement and support the ServiceNow Vulnerability Response (VR) and/or Vendor Risk Management (VRM) modules. This role will partner with Technical Governance, Platform Architecture and ServiceNow Developers to ensure that design, coding and practices are in alignment with scalable enterprise solutions. This role will take on application...

Job Description The Enterprise Functions Technology (EFT) group provides technology solutions and support for Risk, Audit, Finance, Marketing, Human Resources, Corporate Properties, and Stakeholder Relations business lines. In addition, EFT provides unique technology solutions and innovation for Wells Fargo Technology, Enterprise Shared Services, and Enterprise Data Management. This combined portfolio of applications and tools are continually engineered to meet the challenges of stability, security, scalability, and speed. Within EFT, the Cyber Hygiene Technology team is seeking a Senior ServiceNow Engineer (Senior Software Engineer) to implement and support the ServiceNow Vulnerability Response (VR) and/or Vendor Risk Management (VRM) modules. This role will partner with Technical Governance, Platform Architecture and ServiceNow Developers to ensure that design, coding and practices are in alignment with scalable enterprise solutions. This role will take on application...

In this role, you will: Lead complex initiatives designed to mitigate current and emerging risks with broad impact Act as key participant in monitoring, evaluating, and measuring the impact of decisions practiced in Control Management functional area Monitor moderately complex business specific programs, and provide risk management consulting to support the business in designing and implementing risk-mitigation strategies Monitor, measure, evaluate, and report on the impact of decisions and controls to the relevant business group or functional area Develop and implement risk monitoring and risk reporting processes and controls Collaborate with relevant business group to identify current and emerging risks associated with business activities and operations, and provide guidance in developing and implementing risk-mitigating strategies Lead Control Management project or virtual teams Required Qualifications: 5+ years of Risk Management...

About this role: Wells Fargo is seeking a Lead Information Security Engineer... In this role, you will: This position will work closely with the Network Security (NS) leadership team, technical partners, and business groups to develop solutions and strategy for the enterprise. Will be accountable for developing and documenting reference engineering designs and product/service roadmaps to support NS initiatives. Will also support large-scale enterprise technical projects with high visibility. Activities that this position will support or be accountable for: Strategic direction, expert advice, and long-term planning for large NS projects and other corporate initiatives Tactical solutions for immediate problems/changes in response to changing business environments and threats Product strategies for key solutions within SIE Technical partnering with Wells Fargo technical teams and vendors including tracking technical issues and working on solutions...

APN Consulting has an immediate need for a direct client requirement: Title: Information Security Analyst Location: Remote Duration: 3-6 Months Description The Information Security Analyst (contract), reporting to Director GRC will ensure appropriate GRC framework and practices are followed to meet and/or readily respond to IT risk, audit, and compliance requirements. The Information Security Analyst will perform quarterly access and termination monitoring and change monitoring controls from end to end to meet and exceed audit requirements. Account recertification, account attestation or entitlement review, is a critical function that will be performed to monitor, manage, and audit the user account lifecycle from creation to termination. Responsibilities Analyze system user extracts with HR system extracts to prepare worksheets with roles and privileges. Perform VLOOKUPs, XLOOKUPs, scripts and other methods to compare user lists to identify...

Job Functions, Duties, Responsibilities and Position Qualifications: Location Hicksville, NY Position Summary The IT Security Specialist’s role is to configure and administer various IT systems, with a focus on maintaining security through confidentiality, integrity and availability. This individual should have demonstrable experience in Windows, Firewalls, IDS/IPS systems, Linux, SQL, IIS, and varying protocols such as HTTP, HTTPS, SMTP, SSH, L2TP/IPsec with knowledge of TCP/IP and various web applications and troubleshooting. The individual will work on security reporting, creating action plans, educating peers, participating in security investigations and audits. The individual will work as part of the larger Security Engineering group under the direction of the Sr. Security Manager. Travel Up to 10% travel is expected. The IT Security Specialist is expected to travel to all the labs within their territory to perform audits....

Job Functions, Duties, Responsibilities and Position Qualifications: Location Hicksville, NY Position Summary The IT Security Specialist’s role is to configure and administer various IT systems, with a focus on maintaining security through confidentiality, integrity and availability. This individual should have demonstrable experience in Windows, Firewalls, IDS/IPS systems, Linux, SQL, IIS, and varying protocols such as HTTP, HTTPS, SMTP, SSH, L2TP/IPsec with knowledge of TCP/IP and various web applications and troubleshooting. The individual will work on security reporting, creating action plans, educating peers, participating in security investigations and audits. The individual will work as part of the larger Security Engineering group under the direction of the Sr. Security Manager. Travel Up to 10% travel is expected. The IT Security Specialist is expected to travel to all the labs within their territory to perform audits....