LogoFresh Jobs Ahead
BlueCross BlueShield of Tennessee
BlueCross BlueShield of Tennessee
5001 – 10.000 Zaposleni
Sponzor vizuma H1BSvetovanjeZavarovanjeZdravstveno varstvo
BlueCross BlueShield of Tennessee je ponudnik zdravstvenih načrtov s sedežem v Tennesseeju, ki s svojim delovanjem na področju zdravstva in zavarovalništva zagotavlja storitve za 3,4 milijona članov. Kot neodvisni imetnik licence združenja Blue Cross Blue Shield Association in usposobljeni izdajatelj zdravstvenega zavarovanja na trgu Health Insurance Marketplace podjetje združuje zdravstveno kritje s podporo strankam in skrbjo, usmerjeno v skupnost. Njegove karierne možnosti zajemajo širok nabor strokovnih priložnosti, vključno s pripravniškim programom BlueBridge, ki študentom in nedavnim diplomantom pomaga začeti kariero. BlueCross BlueShield of Tennessee poudarja tudi delovno okolje, v katerem so zaposleni cenjeni, spoštovani in vključeni.
LinkedIn
Delovna mesta v podjetju

Senior Information Security Risk Analyst

Lead application security risk and governance work at BlueCross BlueShield of Tennessee, including SAST/DAST oversight, SOC 2 audits, NIST security plans, and risk remediation.

USZdružene države AmerikeTNTennesseeNa daljavoPolni delovni časSeniorZahtevani Jezik: angleščinaTveganje

Opis

  • Provide technical expertise in application security risk management.
  • Oversee the SAST/DAST application scanning program.
  • Evaluate security vulnerabilities and findings from application and infrastructure scans.
  • Work with application teams, incident managers, and business stakeholders to prioritize and reduce risk.
  • Improve use of the SAST/DAST platform and strengthen vulnerability management.
  • Make risk more visible by turning technical findings into actionable business insights.
  • Contribute to a prominent Data Governance initiative.
  • Collaborate with business leaders, data owners, and security, privacy, compliance, and technology teams.
  • Set governance standards, assess risk, monitor compliance, and improve data stewardship.
  • Coordinate SOC 2 audits, including evidence gathering, control validation, and auditor communication.
  • Keep control documentation, mappings, and narratives current.
  • Manage audit findings, remediation work, and issue closure.
  • Develop and maintain NIST System Security Plans (SSPs).
  • Create and manage security awareness training, phishing simulations, and targeted campaigns.
  • Maintain security policies, standards, and procedures throughout their lifecycle.
  • Conduct enterprise and third-party risk reviews, maintain risk registers, assess vendors, and track remediation.
  • Monitor vulnerability fixes against service-level agreements.
  • Complete responses to RFPs and security questionnaires.
  • Contribute across GRC initiatives and encourage collaboration and shared accountability.

Zahteve

  • Bachelor’s degree in a relevant discipline, or equivalent experience totaling four years.
  • At least five years of professional experience in information security or related IT work with security responsibilities.
  • At least two years of experience focused on Governance, Risk, and Compliance (GRC).
  • Experience using AI-enabled tools to automate or improve GRC processes is preferred.
  • A CISSP, CRISC, CISA, or CISM certification is preferred.
  • Ability to assess and document organizational risks, determine their impact, and recommend mitigations.
  • Ability to interpret and apply regulations and frameworks such as NIST, SOC 2, and HIPAA.
  • Ability to analyze security, compliance, and risk metrics.
  • Ability to explain complex risk and compliance topics to technical and non-technical audiences.
  • Ability to work collaboratively across functions.
  • Strong time management skills.
  • Excellent verbal and written communication skills.
  • Strong interpersonal and relationship-building abilities.
  • Ability to work with staff and management at all levels.
  • Availability during Eastern Time business hours is required.
  • Participation in an on-call rotation is required for two weeks every 22 weeks.
  • Visa sponsorship is unavailable for this role.

Ugodnosti

  • Remote, work-from-home position.
  • Employee worker type.
  • Opportunity to shape enterprise-wide decisions and help advance an established Data Governance program.

Sorodna delovna mesta

General Dynamics Information Technology

Vice President and General Manager, Navy and Marine Corps

General Dynamics Information Technology
Sponzor vizuma H1BLogistikaSvetovanjeZdravstveno varstvo
USZdružene države AmerikeSCJužna KarolinaVAVirginija
279.718 $ – 345.000 $ / leto
Na lokacijiPolni delovni časVodjaZahtevani Jezik: angleščinaPodpredsednik
Oblak

Lead GDIT’s Navy and Marine Corps technology services portfolio, with annual revenue above $700 million. Set business strategy, oversee financial performance and delivery, and drive growth across defense programs.

Odpri
Blizzard Entertainment

Associate Director of International Marketing Strategy and Planning

Blizzard Entertainment
1001 – 5000 Zaposleni
E-trgovinaSaaSVideoigre
USZdružene države AmerikeCAKalifornija
126.800 $ – 234.580 $ / leto
HibridnoPolni delovni časSeniorZahtevani Jezik: angleščinaDirektor marketinga

Lead Blizzard’s international gaming marketing strategy, investment priorities, and growth planning. Develop financial models, market frameworks, and recommendations for executive decision-making.

Odpri