Job Title: Sr Security Risk Analyst

Location: SBC Corporation

Department Name: IT&S Security



Status: Salaried

Shift: Day

Pay Range: $100,618.95 - $142,124.00 per year

Pay Transparency:

The above reflects the anticipated annual salary range for this position if hired to work in New Jersey.

The compensation offered to the candidate selected for the position will depend on several factors, including the candidate's educational background, skills and professional experience.

Job Summary:

The RWJBarnabas Health Senior Security Risk Analyst will primarily be responsible for evaluating and governing facility, system and third-party risk for the organization. In addition, this individual will provide mentoring and give assistance to other analysts.This individual will work closely with business units and vendors to assess the security posture of new or existing systems/projects, make recommendations related to security, issue requirements required for security approval and perform follow up on identified risks.

This individual will be working in an Enterprise environment consisting of multiple acute care facilities, physician practices, ambulatory locations and corporate facilities.The ideal candidate will have worked in a healthcare setting in a security role, have a strong understanding of technical concepts, and experience in evaluating HIPAA Privacy and Security risk.

As a Senior Security Risk Analyst, a typical day might include:

• Execute security risk assessments in alignment with established methodologies.
• Independently perform risk assessments using defined frameworks, ensuring consistent application of scope, evaluation criteria, and documentation standards.
• Evaluate assessment responses using risk-based judgment.
• Analyze submitted responses and evidence to identify control gaps, inconsistencies, and risks based on impact and likelihood.
• Facilitate end-to-end assessment lifecycle activities.
• Coordinate stakeholders, manage documentation, and ensure timely completion and communication of assessment results.
• Partner to develop risk-based remediation recommendations.
• Collaborate with IT and business teams to define practical, prioritized corrective actions aligned to organizational risk tolerance.
• Conduct specialized assessments (e,g,, biomedical/clinical technologies).
• Perform targeted evaluations of high-risk or specialized systems using appropriate tools, frameworks, and domain considerations.
• Provide mentorship and technical guidance to junior analysts.
• Support development of junior staff by reviewing work, sharing best practices, and reinforcing consistent assessment execution.
• Conduct facility-level security risk assessments.
• Assess facilities across the organization, ensuring alignment to enterprise security standards and tracking remediation of identified risks.
• Provide support for security incidents and organizational issues.
• Contribute subject matter expertise to incident analysis, containment, and remediation efforts as needed.
• Support Security Operations with service requests and tickets.
• Assist with complex or high-risk requests by providing risk evaluation and guidance aligned to security policies.
• Maintain awareness of emerging risks and program improvements.
• Stay current on threats and best practices to identify opportunities to strengthen assessment processes and controls.
• Perform additional responsibilities as assigned by leadership.
• Support priority initiatives and provide expertise for security, risk, and compliance efforts as needed.

To be considered for this opportunity, you must currently have experience as a Senior Security Risk Analyst

Education:

• Preferred: Bachelor's degree in IT preferred (years of experience may be substituted for degree)
• Minimum: Technology certification and/or currently enrolled in BA or MA

Work Experience:

• 2 or more years' experience in Security, Networking or Field Services in a healthcare setting.

Licenses and Certifications:

• Required: CompTIA Security+, Network+ or similar technical certification.
• Preferred: CISSP/CRISC or similar technical certification.