Skip to main content
Loading
snaprecruit
Logo
Close
Log in
Sign Up
Post a Job

Millions Of Active Candidates

For Employers
VIEW SIMILAR JOBS →
loadingbar
Loading, Please wait..!!

It Security Risk Analyst Fully Remote

  • It Security Risk Analyst Fully Remote job type Posted on: Nov 10, 2026
  • It Security Risk Analyst Fully Remote experience level RICEFW Technologies Inc
  • It Security Risk Analyst Fully Remote employment type Raleigh, North Carolina
  • It Security Risk Analyst Fully Remote employment type Onsite
  • It Security Risk Analyst Fully Remote salary Full-time
Save this job

Point Apply Here APPLY LATER

Curious about compensation?

Explore the historical salary trends, average pay, and estimated compensation for It Security Risk Analyst Fully Remote roles in North Carolina.

View Salary Guide →
Over 12 millions jobs on Snaprecruit.
Find your match !
VIEW SIMILAR JOBS →

Job Title :

It Security Risk Analyst Fully Remote

Job Type :

Full-Time

Job Location :

Raleigh North Carolina United States

Remote :

No

Jobcon Logo Job Description :

***This is an urgent vacant position. The manager has requested a shortened submission window due to the urgent requirement.

The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the North Carolina Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).

Required Knowledge, Skills, and Abilities

1. Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.

2. Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37

3. Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors

4. Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

Minimum Education and Experience

1. Bachelor's degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR

2. Associate degree in Computer Science or a related IT field and three years of progressive experience; OR

3. An equivalent combination of education and experience

Required Qualifications

1. Professional certifications such as CISSP or CISM.

2. Experience performing NIST 800-53 based risk assessments.

3. Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework

Preferred Qualifications

4. Experience completing HITRUST risk assessments.

Required/Desired Skills
Skill Required /Desired Amount of Experience
Thorough knowledge of mainstream operating systems/security technologies inc: network security appliances/identity and access management/cryptography Required 5 Years
Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37. Required 3 Years
Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors Required 3 Years
Ability to prioritize and summarize risk assessment status to project managers and executive leadership. Required 3 Years
Questions
No. Question
Question1 Absences greater than two weeks MUST be approved by CAI management in advance, and contact information must be provided to CAI so that the resource can be reached during his or her absence. The Client has the right to dismiss the resource if he or she does not return to work by the agreed upon date. Do you agree to this requirement?
Question2 What is your candidate's email address?
Question3 How soon can your candidate start if selected for this opportunity?
Question4 Vendors are encouraged to submit candidates that are available for the duration of the assignment. Do you anticipate your candidate being able to work until the proposed end date listed on this Pixid VMS Pro req?
Question5 Vendors must disclose to the agency if the candidate will be subcontracted at the time of submission. Is your candidate an employee of your company or a subcontractor? Please be sure to notify a CAI Account Manager if your candidate's employee status changes.
Question6 Vendors must notify the agency if any portion of the requirements listed in this task order will be outsourced to other countries. Do you anticipate outsourcing any work being done for this assignment to another country?
Question8 Payment for all approved hours will be paid at the straight hourly rate regardless of the total hours worked by the engaged resource. It is the responsibility of the Vendor to adhere to any applicable compensation laws including payment for overtime hours. Do you agree to this requirement?
Question9 Have you thoroughly validated, and attest to the accuracy of, the credentials listed throughout your candidate's Pixid VMS Pro profile and resume pursuant to Section 5.2.5 of ITS-009440?

People Also Search For

Jobcon Logo Position Details

Posted:

Nov 10, 2026

Reference Number:

48145-12269

Employment:

Full-time

City:

Raleigh

Job Origin:

CIEPAL_ORGANIC_FEED

Share this job:

  • linkedin

Jobcon Logo
A job sourcing event
In Dallas Fort Worth
Aug 19, 2017 9am-6pm
All job seekers welcome!
Get your FREE tickets

It Security Risk Analyst Fully Remote    Apply

Click on the below icons to share this job to Linkedin, Twitter!

***This is an urgent vacant position. The manager has requested a shortened submission window due to the urgent requirement.

The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the North Carolina Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).

Required Knowledge, Skills, and Abilities

1. Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.

2. Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37

3. Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors

4. Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

Minimum Education and Experience

1. Bachelor's degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR

2. Associate degree in Computer Science or a related IT field and three years of progressive experience; OR

3. An equivalent combination of education and experience

Required Qualifications

1. Professional certifications such as CISSP or CISM.

2. Experience performing NIST 800-53 based risk assessments.

3. Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework

Preferred Qualifications

4. Experience completing HITRUST risk assessments.

Required/Desired Skills
Skill Required /Desired Amount of Experience
Thorough knowledge of mainstream operating systems/security technologies inc: network security appliances/identity and access management/cryptography Required 5 Years
Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37. Required 3 Years
Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors Required 3 Years
Ability to prioritize and summarize risk assessment status to project managers and executive leadership. Required 3 Years
Questions
No. Question
Question1 Absences greater than two weeks MUST be approved by CAI management in advance, and contact information must be provided to CAI so that the resource can be reached during his or her absence. The Client has the right to dismiss the resource if he or she does not return to work by the agreed upon date. Do you agree to this requirement?
Question2 What is your candidate's email address?
Question3 How soon can your candidate start if selected for this opportunity?
Question4 Vendors are encouraged to submit candidates that are available for the duration of the assignment. Do you anticipate your candidate being able to work until the proposed end date listed on this Pixid VMS Pro req?
Question5 Vendors must disclose to the agency if the candidate will be subcontracted at the time of submission. Is your candidate an employee of your company or a subcontractor? Please be sure to notify a CAI Account Manager if your candidate's employee status changes.
Question6 Vendors must notify the agency if any portion of the requirements listed in this task order will be outsourced to other countries. Do you anticipate outsourcing any work being done for this assignment to another country?
Question8 Payment for all approved hours will be paid at the straight hourly rate regardless of the total hours worked by the engaged resource. It is the responsibility of the Vendor to adhere to any applicable compensation laws including payment for overtime hours. Do you agree to this requirement?
Question9 Have you thoroughly validated, and attest to the accuracy of, the credentials listed throughout your candidate's Pixid VMS Pro profile and resume pursuant to Section 5.2.5 of ITS-009440?

Loading
Please wait..!!