Security Specialist - Remote

Security Specialist - Remote Role and Responsibilities State of North Carolina - DIT is looking for Security Specialist. Work schedule is Remote. The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the North Carolina Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR). Required Qualifications 3 Years of thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography. 3 Years working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37 3 Years of strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors 3 Years ability to prioritize and summarize risk assessment status to project managers and executive leadership. Bachelor's degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR Associate degree in Computer Science or a related IT field and three years of progressive experience; OR An equivalent combination of education and experience. Professional certifications such as CISSP or CISM. Experience performing NIST 800-53 based risk assessments. Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework. Preferred Qualifications Experience completing HITRUST risk assessments.