I'm looking for Sr Information Security Risk Analyst positions in Philadelphia, ideally in the healthcare industry, for hybrid work, requiring 3+ years of experience, with a focus on compliance with security frameworks like NIST and HIPAA.

I've found several Sr Information Security Risk Analyst positions in Philadelphia within the healthcare industry that offer a hybrid work model and require at least 3 years of experience with a focus on NIST and HIPAA compliance. Currently, there are 28 relevant job listings available for you to explore.

Sr Information Security Risk Analyst

Philadelphia, PA

Healthcare

3 years + Experience

Hybrid

Can you help me to analyze the job description and company culture?

Sure. Here's the analysis:

Job Analysis:

The primary purpose of the Sr Information Security Risk Analyst role at Independence Blue Cross is to ensure the organization maintains a robust security posture while managing compliance with essential audit and regulatory standards, such as SOC 2 and HITRUST. The key responsibilities encompass leading audits, overseeing risk management processes, and collaborating with various internal teams to ensure adherence to frameworks like NIST and HIPAA. Successful candidates will find themselves navigating complex multi-channel communications with both auditors and internal stakeholders, requiring not just technical skills but a strong capacity for problem-solving and leadership under pressure. The implicit expectation is to not only execute tasks but also proactively identify risks and influence the organization's approach to security compliance. The role demands a blend of technical knowledge, extensive experience in compliance and risk management, and exceptional organizational skills to coordinate effectively across teams and ensure all audit obligations are met in a timely fashion. Success will likely look like having clean audit reports, demonstrating reduced risk levels through effective compliance measures, and contributing to a culture of security excellence within the organization.

Company Analysis:

Independence Blue Cross holds a leading position in the health insurance sector of southeastern Pennsylvania, distinguished by its dedication to enhancing the health and wellness of the communities it serves. The company's 85-year history reflects a commitment to innovation and customer service which is vital for attracting and retaining clients. Within this organizational framework, the role of the Sr Information Security Risk Analyst is crucial, likely seen as a strategic move to bolster their security initiatives in an era of increasing cybersecurity threats. The company fosters a mission-focused culture, emphasizing teamwork and a customer-centric approach, suggesting that candidates for this role should embody these values to thrive. The hybrid work model showcases a progressive approach to work-life balance, indicating that they value flexibility while maintaining certain in-person collaboration rhythms. Given that the security analyst position reports to leadership and interacts deeply with both internal and external auditors, it is pivotal for the candidate to have not only technical expertise but also a strong alignment with the company’s mission to enhance community health. The strategic context suggests that this role not only addresses current compliance needs but anticipates future challenges in regulatory landscapes, positioning Independence Blue Cross for long-term resilience in a competitive market.

Mock up some interview questions based on the job description.

Absolutely. Here are some mock interview questions that could come up:

Tell me about a time when you had to navigate a challenging audit process. How did you ensure that all requirements were met?
Describe a situation where you identified a significant risk in a project. What steps did you take to mitigate it?
Can you provide an example of how you've successfully managed compliance with a security framework like NIST CSF or HITRUST?
How do you prioritize your tasks when you're leading multiple compliance initiatives simultaneously?
What strategies do you use to maintain a risk register effectively?
How would you approach a SOC 2 audit with a new external auditor who is not familiar with your organization?
What tools or platforms have you used for governance, risk, and compliance (GRC) purposes, and how did they enhance your work?
Imagine you are faced with conflicting priorities from different teams regarding compliance deadlines. How would you handle this situation?
If you discovered a potential compliance breach, what immediate actions would you take, and who would you involve?
Why are you interested in working at Independence Blue Cross specifically?
How do your values align with our company's mission of enhancing the health and well-being of the communities we serve?
What do you find most challenging about working in the information security field, and how do you address those challenges?
What questions do you have about our current security initiatives or the team you would be working with?
How do you keep abreast of changes in regulatory requirements that could affect your role?
Can you share a specific example of a successful collaboration with auditors? What was your approach?

Job Details

Overview Company

Senior Information Security Risk Analyst

Independence Blue Cross

2 days ago

Highlight

HybridFull-time3+ yearsSenior

Summary

Independence Blue Cross is seeking a Sr Information Security Risk Analyst - Hybrid to join their team in Philadelphia, PA. The role involves leading and supporting key security and compliance initiatives to maintain a strong security posture.

About the Role

As a Sr Information Security Risk Analyst, you will manage and direct major audit and certification programs such as SOC 2 and HITRUST, oversee risk management activities, and ensure compliance with information security frameworks and regulatory requirements. You will collaborate with internal teams and external auditors, act as a hands-on leader, and report on the status of audits, certifications, and risk management efforts to leadership.

About You

Required:

Bachelor's degree in Information Security, IT, Business Administration, or a related field.
3+ years of experience in information security, IT audit, or GRC roles.
Strong understanding of audit processes, control design, testing, and compliance frameworks.
Familiarity with security frameworks (NIST CSF, HITRUST, ISO 27001) and regulatory requirements (HIPAA, PCI DSS, GDPR).
Experience with GRC tools and platforms.
Exceptional organizational, communication, and problem-solving skills.
Self-motivated and confident in leading complex projects with minimal supervision.

Preferred:

Relevant certifications (e.g., CISA, CISSP, HITRUST CCSFP).
Experience with Big 4 or large firm audit.

Independence Blue Cross

Independence Blue Cross is the leading health insurance organization in southeastern Pennsylvania. For 85 years, we have been enhancing the health and well-being of the people and communities we serve. We deliver innovative and competitively priced health care products and services; pioneer new ways to reward doctors, hospitals, and other health care professionals for coordinated, quality care; and support programs and events that promote wellness.

To learn more, visit ibx.com. Connect with us on Facebook and Twitter at @IBX and @IndependenceBlueCross on Instagram. Independence Blue Cross is an independent licensee of the Blue Cross and Blue Shield Association.

Philadelphia, PA