Security Risk Analyst II

Job description

Position Purpose: Design, implement and monitor IT controls for core applications and systems. Analyze IT data to assess risk and improve processes and efficiency. Key Details: Conduct various Risk Assessments of information technology systems and internal processes. Recommend controls to mitigate loss of information assets to protect the confidentiality, integrity, and availability of sensitive data while meeting the core organizational mission of Centene. This is a remote position within the United States. Candidates must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J-1, OPT, or CPT. Assess security risks of systems, applications, processes with emphasis on cybersecurity risks against common control frameworks and regulations including but not limited to HIPAA, NIST, ISO-27001 and make recommendations to mitigate. Utilize qualitative and quantitative analysis methods to assess risk and provide outputs to risk stakeholders. Design, monitor and evaluate controls for effectiveness and efficiency to mitigate areas of risks based on Centene's defined risk appetite. Prepare finalized reports stating identified risks, and their recommended controls for stakeholders to make treatment decisions. Prepare and document standard procedures and protocols. Review and prepare scheduled audit reports from both internal and external requests. Design application and system level controls in adherence to best auditing and security practices. Interact with business owners to identify key controls and coordinate appropriate measurement efforts for process improvement. Complete optimization reviews and prepare audit reports associated with the completion of scheduled audits. Assist with designing the IT environment to conform to relevant industry standards, such as ISO 27001, HIPAA, Sarbanes-Oxley, PCI-DSS and other related state requirements. Assist with evaluation of controls against security best practices. Serve as primary liaison between auditing bodies, IT security management, compliance and business stakeholders. Assist with implementation of department strategy related information systems and technology architecture. Performs other duties as assigned. Complies with all policies and standards. Education/Experience: Bachelor's degree in IT, MIS, Accounting, Finance, Business Administration, related field or equivalent experience. 3+ years of combined auditing and IT controls design experience. Knowledge of IT systems and processes and experience evaluating internal technical control systems required. Licenses/Certifications: CISSP, CRISC, CISA, CISM, FAIR, CPA, or CIA preferred. Pay Range: $70,100.00 - $126,200.00 per year At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday. Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law , including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility. Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law. Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act