Senior Information Risk Consultant

Highmark Health

Senior Information Risk Consultant ensuring compliance and leading risk assessments in healthcare sector. Collaborating with multiple teams to drive security architecture and risk management initiatives.

Posted 5/14/2026full-timeRemote • Louisiana, Maryland, North Carolina, Pennsylvania, Washington • 🇺🇸 United StatesSenior💰 $94,200 - $151,000 per yearWebsite

Tech Stack

Tools & technologies

Cyber SecurityFirewalls

About the role

Key responsibilities & impact

Lead in conducting information risk assessments as assigned to the team
Request and analyze documentation necessary to perform appropriate assessment and conduct necessary interviews in order to collect and review relevant materials necessary to produce results of the assessment
Clearly and concisely document and communicate risk assessment results with requester, security architects and management, as appropriate
Conduct and formulate appropriate risk scoring, as it relates to threat, vulnerability, likelihood, impact, security controls/countermeasures, etc.
Perform follow up activities related to assigned risks, ensuring mitigation activities stay on track
Communicate risk treatment methodology, risk avoidance, risk acceptance, risk transference and risk mitigation to appropriate groups
Take lead role in partnering with multiple projects and initiatives to apply security architecture requirements, develop architecture solutions, integrate security into solution designs, access risks of security gaps, and develop architecture remediation
Prepare and present solution decks to different levels of management and varying technical experience

Requirements

What you’ll need

Bachelor’s Degree - Information Security, Information Systems, Information Assurance, Computer Science or related field
At least 10 years' experience in Information Security, Governance, Risk and/or Compliance
7 - 10 years' experience in Information Security and/or Information Risk Management and/or Information Technology
5 - 7 years' experience within Information Security Governance, Risk and/or Compliance functions and activities
Familiarity with technologies such as intrusion Prevention Systems (IPS), firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), and virtualization platforms
Experience working within an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
In-depth understanding of network security architecture, network and networking protocols

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work hours
Paid time off
Professional development opportunities

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information risk assessmentsrisk scoringsecurity architecturerisk treatment methodologyrisk avoidancerisk acceptancerisk transferencerisk mitigationnetwork security architecturenetwork protocols

Soft Skills

communicationdocumentationleadershipcollaborationpresentation