Conduct internal risk assessments across business units, systems, applications and processes to identify potential security, operational, and compliance risks. * Develop and maintain the internal ...
Conduct internal risk assessments across business units, systems, applications and processes to identify potential security, operational, and compliance risks. * Develop and maintain the internal ...
Risk assessment in Various SDLC phases - Design phase: Thread Modeling; Dev phase: Version control, code review , unit testing ; Testing Phase : Regression , unique and integration testing and ...
Quick apply
Risk assessment in Various SDLC phases - Design phase: Thread Modeling; Dev phase: Version control, code review , unit testing ; Testing Phase : Regression , unique and integration testing and ...
Conduct internal risk assessments across business units, systems, applications and processes to identify potential security, operational, and compliance risks. * Develop and maintain the internal ...
Conduct internal risk assessments across business units, systems, applications and processes to identify potential security, operational, and compliance risks. * Develop and maintain the internal ...
The Information Security Risk and Compliance Analyst performs recurring and ad hoc assessments such as user access reviews, vendor due diligence and monitoring, and other control validation tasks to ...
The Information Security Risk and Compliance Analyst performs recurring and ad hoc assessments such as user access reviews, vendor due diligence and monitoring, and other control validation tasks to ...
The Information Security Risk and Compliance Analyst performs recurring and ad hoc assessments such as user access reviews, vendor due diligence and monitoring, and other control validation tasks to ...
The Information Security Risk and Compliance Analyst performs recurring and ad hoc assessments such as user access reviews, vendor due diligence and monitoring, and other control validation tasks to ...
Senior OT Security Analyst
Houston, TX · Hybrid
$91K - $119K/yr
Assess security risk and impact of organizational system changes. * Identify opportunities to standardize and optimize the security stack, leveraging cloud capabilities. * Monitor industry trends ...
Senior OT Security Analyst
Houston, TX · Hybrid
$91K - $119K/yr
Assess security risk and impact of organizational system changes. * Identify opportunities to standardize and optimize the security stack, leveraging cloud capabilities. * Monitor industry trends ...
Security - Global Security Assistant
Lindale, TX · On-site
$20 - $23/hr
How You'll Contribute * Assist with Security Risk Assessment. * Engage with the community in meetings or other types of communication, encouraging an atmosphere and awareness of security. * Create a ...
Security - Global Security Assistant
Lindale, TX · On-site
$20 - $23/hr
How You'll Contribute * Assist with Security Risk Assessment. * Engage with the community in meetings or other types of communication, encouraging an atmosphere and awareness of security. * Create a ...
Security - Global Security Assistant
Lindale, TX · On-site
$20 - $23/hr
How You'll Contribute * Assist with Security Risk Assessment. * Engage with the community in meetings or other types of communication, encouraging an atmosphere and awareness of security. * Create a ...
Security - Global Security Assistant
Lindale, TX · On-site
$20 - $23/hr
How You'll Contribute * Assist with Security Risk Assessment. * Engage with the community in meetings or other types of communication, encouraging an atmosphere and awareness of security. * Create a ...
Manager, Technology Risk
Southlake, TX · On-site
$115K - $150K/yr
As a Technology Risk Manager focused on application security, you will help strengthen Schwab's ability to identify, assess, monitor, and manage technology risk across critical security and software ...
Manager, Technology Risk
Southlake, TX · On-site
$115K - $150K/yr
As a Technology Risk Manager focused on application security, you will help strengthen Schwab's ability to identify, assess, monitor, and manage technology risk across critical security and software ...
Tech Risk and Controls Lead
Plano, TX · On-site
Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
Tech Risk and Controls Lead
Plano, TX · On-site
Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
Tech Risk and Controls Lead
Plano, TX · On-site
Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
Tech Risk and Controls Lead
Plano, TX · On-site
Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
New
Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
New
Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
New
Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
New
Senior Risk and Compliance Analyst
$96K - $148K/yr
The Senior Risk and Compliance Analyst is a key member of the IT Governance, Risk, and Compliance ... ion Security, Procurement, Legal, OT, and the business to assess technology and vendor-related ...
New
Senior Risk and Compliance Analyst
$96K - $148K/yr
The Senior Risk and Compliance Analyst is a key member of the IT Governance, Risk, and Compliance ... ion Security, Procurement, Legal, OT, and the business to assess technology and vendor-related ...
New
The IA Security Vulnerability Assessment Analyst plays a vital role in reducing cyber risk across the DHA enterprise. By identifying vulnerabilities, validating remediations, and ensuring compliance ...
The IA Security Vulnerability Assessment Analyst plays a vital role in reducing cyber risk across the DHA enterprise. By identifying vulnerabilities, validating remediations, and ensuring compliance ...
VP, Cyber, Technology and Information Security Risk - Digital Assets
Dallas, TX · On-site
$95 - $170/hr
The candidate will assess control effectiveness, challenge risk decisions, and influence ... Report on evolving and emerging technology, security risk issues as well as internal and external ...
VP, Cyber, Technology and Information Security Risk - Digital Assets
Dallas, TX · On-site
$95 - $170/hr
The candidate will assess control effectiveness, challenge risk decisions, and influence ... Report on evolving and emerging technology, security risk issues as well as internal and external ...
Job Title: Network Security Analyst Location : Hybrid, Austin, Texas (Local Only) Duration ... TCF, TAC 202, TEXRAMP) into actionable prioritized risk assessment methodologies * 8 Years ...
Quick apply
Job Title: Network Security Analyst Location : Hybrid, Austin, Texas (Local Only) Duration ... TCF, TAC 202, TEXRAMP) into actionable prioritized risk assessment methodologies * 8 Years ...
Chief Information Security Officer
Houston, TX · On-site
$180 - $280/hr
Deliver regular security updates, risk assessments, and actionable insights to executive leadership and the board * Translate complex technical risks into clear business impact and strategic ...
Chief Information Security Officer
Houston, TX · On-site
$180 - $280/hr
Deliver regular security updates, risk assessments, and actionable insights to executive leadership and the board * Translate complex technical risks into clear business impact and strategic ...
The candidate will assess control effectiveness, challenge risk decisions, and influence ... Report on evolving and emerging technology, security risk issues as well as internal and external ...
The candidate will assess control effectiveness, challenge risk decisions, and influence ... Report on evolving and emerging technology, security risk issues as well as internal and external ...
GRC Risk Management Analyst
Austin, TX · On-site
... security logs, and independent assurance reports, and to identify when deeper technical validation is required * Ability to assess business impact, apply risk criteria, and communicate clear ...
New
GRC Risk Management Analyst
Austin, TX · On-site
... security logs, and independent assurance reports, and to identify when deeper technical validation is required * Ability to assess business impact, apply risk criteria, and communicate clear ...
New
Freelance Security Risk Assessment information
What is the difference between Freelance Security Risk Assessment vs Security Consultant?
| Aspect | Freelance Security Risk Assessment | Security Consultant |
|---|---|---|
| Credentials | Certifications like CISSP, CISA, or CEH often required | Similar certifications, often with additional experience requirements |
| Work Environment | Independent, project-based, often remote or on-site at client locations | Typically employed by firms or consulting agencies, may work on multiple projects |
| Industry Usage | Used by organizations seeking independent risk assessments | Engaged for broader security strategy, policy development, and consulting |
While both roles involve assessing security risks, Freelance Security Risk Assessments focus on independent, project-specific evaluations, whereas Security Consultants often provide ongoing security advice and strategy within organizations or consulting firms.
Full-time
Re-posted 20 days ago
Job description
We introduced precision medicine to the world and built an industry around the idea that every patient deserves answers as unique as their DNA. Backed by cutting-edge molecular science and AI, we ask ourselves every day: "What would I do if this patient were my mom?" That question drives everything we do.
But our mission doesn't stop with cancer. We're pushing the frontiers of medicine and leading a revolution in healthcare-driven by innovation, compassion, and purpose.
Join us in our mission to improve the human condition across multiple diseases. If you're passionate about meaningful work and want to be part of something bigger than yourself, Caris is where your impact begins.
Position Summary
Working as part of the Information Security Team, the GRC Analyst - Enterprise & Third Party Risk will support and lead internal risk assessments, exception reviews, and third-party risk management activities. This role plays a critical part in identifying, assessing, and monitoring risks across internal systems and third-party vendors while ensuring that exceptions to policy are appropriately evaluated and documented. The ideal candidate will bring strong analytical capabilities and a proactive approach to governance, risk, and compliance.
Job Responsibilities
- Conduct internal risk assessments across business units, systems, applications and processes to identify potential security, operational, and compliance risks.
- Develop and maintain the internal risk register and facilitate periodic risk reviews with control owners and business stakeholders.
- Develop dashboards, reports, and metrics to communicate risk status, trends, and program effectiveness to leadership.
- Evaluate risk exception requests, perform risk-based analysis, and ensure appropriate documentation, approval, and tracking.
- Lead and support third-party risk management activities including vendor due diligence, risk assessments, contract reviews, and ongoing monitoring.
- Partner with procurement, legal, and business stakeholders to embed security and risk requirements into vendor lifecycle processes.
- Assist in defining and maintaining IT and organizational policies, standards, and procedures related to security, risk, and compliance.
- Support internal and external audits (e.g., HIPAA, SOX, GDPR) by collecting evidence and addressing audit findings and recommendations.
- Collaborate with IT and business teams to assess the adequacy and effectiveness of internal controls and drive remediation efforts.
- Conduct periodic gap assessments and ensure controls are maintained to support ongoing compliance.
- Stay abreast of changes in regulatory requirements and industry best practices related to risk management, third-party governance, and cybersecurity.
- Assist with the creation and delivery of security awareness training related to risk, vendor management, and compliance requirements.
- Participate in the development and maintenance of business continuity, disaster recovery, and incident response processes from a risk perspective.
Required Qualifications
- Bachelor's degree in Information Security, Risk Management, or a related field; or equivalent work experience.
- Minimum of 4 years of experience in Information Security Risk Management, Third-Party Risk, or GRC functions.
- Strong understanding of internal control assessments, exception management, and third-party/vendor risk practices.
- Familiarity with legal and regulatory compliance standards such as HIPAA, SOX, GDPR, etc.
- Knowledge of security and risk frameworks such as NIST Cybersecurity Framework, ISO 27001, and CIS Controls.
- Excellent communication skills with the ability to collaborate effectively across technical and non-technical teams.
- Ability to translate technical risks into business impacts for non-technical audiences.
- Strong analytical and problem-solving abilities with experience interpreting risk data to drive decision-making.
- Demonstrated ability to manage multiple assessments or projects simultaneously in a fast-paced environment.
- Experience writing policies, standards, procedures, or risk documentation..
- Working knowledge of data protection concepts such as data classification, encryption, access management, and secure data handling.
- Proficiency in Microsoft Excel, PowerPoint, and other data/reporting tools commonly used to support risk analysis and presentations.
- Ability to work independently with minimal supervision while maintaining a high attention to detail.
Preferred Qualifications
- Industry certifications such as CISA, CRISC, CISSP are highly desirable.
- Experience using GRC or IRM platforms (e.g., Compyl, AuditBoard, RSA Archer, LogicGate, or similar).
- Experience with SOC 2, PCI-DSS, HITRUST, or other security compliance frameworks.
- Experience in healthcare or life sciences industry is a plus.
- Background supporting cloud security or assessing cloud service providers (AWS, Azure, GCP).
- Experience conducting business impact analyses (BIA) or participating in business continuity/disaster recovery planning.
- Prior involvement in incident response processes or evaluating post-incident risk implications.
- Strong understanding of contract language related to security, privacy, liability, and service-level obligations.
- Familiarity with quantitative risk analysis methodologies (e.g., FAIR).
- Experience working in organizations undergoing rapid growth, security transformation, or compliance maturity improvements.
Physical Demands
- Must possess the ability to sit and/or stand for long periods of time.
- May be required to lift routine office supplies and use standard office equipment.
Other
- This position may require periodic travel and availability during evenings, weekends, or holidays depending on business needs.
Conditions of Employment: Individual must successfully complete pre-employment process, which includes criminal background check, drug screening, credit check ( applicable for certain positions) and reference verification.
This job description reflects management's assignment of essential functions. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.
Caris Life Sciences is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, among other things, or status as a qualified individual with disability.