BlueCross BlueShield of Tennessee
BlueCross BlueShield of Tennessee
BlueCross BlueShield of Tennessee — денсаулық сақтау және сақтандыру салаларындағы қызметі арқылы 3,4 миллион мүшеге қызмет көрсететін, Теннесси штатында орналасқан медициналық сақтандыру жоспарын ұсынушы компания. Blue Cross Blue Shield Association ұйымының тәуелсіз лицензия иесі әрі медициналық сақтандыру нарығында жоспар ұсынуға құқығы бар компания ретінде ол медициналық сақтандыруды клиенттерге қызмет көрсетумен және қоғамға бағытталған қамқорлықпен ұштастырады. Компаниядағы мансап мүмкіндіктері әртүрлі кәсіби бағыттарды қамтиды, соның ішінде студенттер мен оқуын жақында аяқтаған түлектерге мансабын бастауға көмектесетін BlueBridge тағылымдама бағдарламасы бар. BlueCross BlueShield of Tennessee қызметкерлер қадірленетін, құрметтелетін және өздерін ұжымның бір бөлігі ретінде сезінетін жұмыс ортасын қалыптастыруға да мән береді.

Senior Information Security Risk Analyst

Lead application security risk and governance work at BlueCross BlueShield of Tennessee, including SAST/DAST oversight, SOC 2 audits, NIST security plans, and risk remediation.

Сипаттама

  • Provide technical expertise in application security risk management.
  • Oversee the SAST/DAST application scanning program.
  • Evaluate security vulnerabilities and findings from application and infrastructure scans.
  • Work with application teams, incident managers, and business stakeholders to prioritize and reduce risk.
  • Improve use of the SAST/DAST platform and strengthen vulnerability management.
  • Make risk more visible by turning technical findings into actionable business insights.
  • Contribute to a prominent Data Governance initiative.
  • Collaborate with business leaders, data owners, and security, privacy, compliance, and technology teams.
  • Set governance standards, assess risk, monitor compliance, and improve data stewardship.
  • Coordinate SOC 2 audits, including evidence gathering, control validation, and auditor communication.
  • Keep control documentation, mappings, and narratives current.
  • Manage audit findings, remediation work, and issue closure.
  • Develop and maintain NIST System Security Plans (SSPs).
  • Create and manage security awareness training, phishing simulations, and targeted campaigns.
  • Maintain security policies, standards, and procedures throughout their lifecycle.
  • Conduct enterprise and third-party risk reviews, maintain risk registers, assess vendors, and track remediation.
  • Monitor vulnerability fixes against service-level agreements.
  • Complete responses to RFPs and security questionnaires.
  • Contribute across GRC initiatives and encourage collaboration and shared accountability.

Талаптар

  • Bachelor’s degree in a relevant discipline, or equivalent experience totaling four years.
  • At least five years of professional experience in information security or related IT work with security responsibilities.
  • At least two years of experience focused on Governance, Risk, and Compliance (GRC).
  • Experience using AI-enabled tools to automate or improve GRC processes is preferred.
  • A CISSP, CRISC, CISA, or CISM certification is preferred.
  • Ability to assess and document organizational risks, determine their impact, and recommend mitigations.
  • Ability to interpret and apply regulations and frameworks such as NIST, SOC 2, and HIPAA.
  • Ability to analyze security, compliance, and risk metrics.
  • Ability to explain complex risk and compliance topics to technical and non-technical audiences.
  • Ability to work collaboratively across functions.
  • Strong time management skills.
  • Excellent verbal and written communication skills.
  • Strong interpersonal and relationship-building abilities.
  • Ability to work with staff and management at all levels.
  • Availability during Eastern Time business hours is required.
  • Participation in an on-call rotation is required for two weeks every 22 weeks.
  • Visa sponsorship is unavailable for this role.

Артықшылықтар

  • Remote, work-from-home position.
  • Employee worker type.
  • Opportunity to shape enterprise-wide decisions and help advance an established Data Governance program.

Ұқсас жұмыс орындары

Thermo Fisher Scientific

Clarity PPM Applications Administrator – Thermo Fisher Scientific, Remote India

Thermo Fisher Scientific

Administer Clarity PPM and provide Level 2 support, monitoring, access management, testing, and deployments. Support enterprise application operations across India and the Philippines.

Ашу
Thermo Fisher Scientific

Clarity PPM Applications Administrator

Thermo Fisher Scientific

Provide Level 2 Clarity PPM administration and operational support, including monitoring, access assistance, testing, and control activities. Fully remote position supporting India and Philippines schedules.

Ашу
Avantor

Operations Coordinator – Laboratory Inventory and Shipping

Avantor

Coordinate laboratory inventory, purchasing, shipping, and customer service for Avantor’s scientific customers. The role also supports hazardous materials shipments, reporting, and inventory systems.

Ашу
Intact

Property Claims Adjuster II – Intact, Mississauga

Intact

Investigate and settle residential, condominium, and commercial property claims for Intact customers across Canada. Deliver empathetic support through digital and phone channels.

Ашу
Plug and Play Tech Center

2D Game Artist

Plug and Play Tech Center

Create 2D artwork, Spine animations, and After Effects previews for Playtech’s digital games. Prepare production-ready assets for table, instant, and crash games.

Ашу
Endless Studios

Game Design Curriculum Developer (Unity)

Endless Studios

Develop game design lessons for Florida high school career and technical education programs using Endless Studios’ Endstar engine. Create Unity bridge lessons, assessments, teacher guides, and classroom tutorials.

Ашу
Nivoda

Senior AI/ML Engineer, Remote in the United States

Nivoda

Develop ranking, recommendation, and multimodal search systems for Nivoda’s global jewellery marketplace and jeweller storefronts. Build production machine learning capabilities across search, product discovery, and image matching.

Ашу