What are the responsibilities and job description for the Risk Analysis Specialist (NIST SP 800-30) position at Xtreme Solutions Inc?
Description
Position Summary
Conducts the formal HIPAA Risk Analysis required under 45 CFR
Required Qualifications
Fully remote; must remain within the continental United States.
Position Summary
Conducts the formal HIPAA Risk Analysis required under 45 CFR
- 164.308(a)(1)(ii)(A), identifying threats/vulnerabilities to ePHI, scoring likelihood and impact, and assigning risk levels using NIST SP 800-30 methodology.
- Identify and document reasonably anticipated threats and vulnerabilities unique to each department.
- Assess likelihood of threat occurrence and magnitude of potential impact (qualitative and/or quantitative).
- Assign and document risk levels for all threat/vulnerability combinations.
- Recommend security controls to mitigate identified risks.
Required Qualifications
- 4 years of IT risk analysis experience using NIST SP 800-30 or comparable frameworks.
- Strong quantitative/qualitative risk-modeling skills.
- Experience producing formal risk analysis reports for regulated industries.
- CRISC or GRCP certification.
- Healthcare-sector risk analysis experience.
Fully remote; must remain within the continental United States.