Skip to main content
MSys Inc. logo

Information Security Risk Analyst

MSys Inc.

Remote · USTemporarySeen 1 day agoSeen in employer's feed 1 day ago

Most applications go out cold — see where you stand first. No sign-up to start.

You apply on the employer's site, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
No compensation found
Location
Remote · US
Schedule
Temporary
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Requirements

Credentials this posting asks for.

CISSP Or CISM Certification, required

Job overview

The Information Security Risk Analyst performs an annual third-party risk assessment of a technical implementation vendor using the North Carolina Statewide Information Security Manual. Working with a lead analyst, the analyst owns delivery of the System and Data Inventory, Risk Registry, and Risk Assessment Report. The role requires security and regulatory knowledge, NIST framework experience, and the ability to assess vendor evidence and communicate risk status.

Skills & qualifications

RequiredNice to have

Skills

Operating Systems, requiredSecurity Technologies, requiredNetwork Security Appliances, requiredIdentity and Access Management, requiredCryptography, requiredIT Security, requiredFederal and State Regulations, requiredNIST SP 800-53, requiredNIST SP 800-30, requiredNIST SP 800-37, requiredVendor Interviews, requiredEvidence Evaluation, requiredVendor Feedback, requiredRisk Prioritization, requiredRisk Status Communication, requiredNIST-Based Risk Assessments, requiredNIST Cybersecurity Framework, requiredNIST Privacy Framework, requiredHITRUST Risk Assessments, nice to have

Qualifications

Bachelor's in Computer Science or Related IT Field, required2 Years IT Security Experience, requiredAssociate Degree in Computer Science or Related IT Field, required3 Years Progressive Experience, requiredEquivalent Education and Experience, requiredCISSP or CISM Certification, required5 Years Operating Systems and Security Technologies Experience, required3 Years IT Security and Regulations Experience, required3 Years Vendor Assessment Experience, required3 Years Risk Communication Experience, required

Full job description

***Mode of Interview :- WebCam Interview *** Very long term project (Initial PO till for 1 year - expect to go for 3+ years) Remote

Description:

The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the North Carolina Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).

Required Knowledge, Skills, and Abilities

  • Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.

  • Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37.

  • Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors.

  • Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

Minimum Education and Experience

  • Bachelor's degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR

  • Associate degree in Computer Science or a related IT field and three years of progressive experience; OR

  • An equivalent combination of education and experience.

Required Qualifications

  • Professional certifications such as CISSP or CISM.

  • Experience performing NIST 800-53 based risk assessments.

  • Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework.

Preferred Qualifications

  • Experience completing HITRUST risk assessments.

Skills/Requirements

Skill Required Years

Thorough knowledge of mainstream operating systems/security technologies inc: network security appliances/identity and access management/cryptography Required 5 Years

Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37. Required 3 Years

Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors Required 3 Years

Ability to prioritize and summarize risk assessment status to project managers and executive leadership. Required 3 Years

How this job compares

Set against the 861 open Risk Analyst jobs on Olive Jobs, counted November 12, 2026.

Pay
  • This postingNot listed
  • US median$91–132K/yr590 salary ranges
  • US median$36–40/hr41 hourly ranges
Openings
Olive Jobs lists 861 open Risk Analyst jobs across the US. 8% of them nationwide are listed as remote or flexible.
Hiring the most across the US
Experience
This posting asks for at least 2 years of experience; Risk Analyst postings that state a minimum ask for 3 years at the median (674 postings).
Education
257 of the 861 open Risk Analyst jobs (30%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 12, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.