> Markdown version of [/jobs/ext/2589738-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2589738-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst - **Company:** Blue Cross and Blue Shield of RI Careers - **Location:** Providence, RI, United States (Remote available) - **Experience:** Experienced - **Salary:** $83,200.0 - $124,800.0 - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, Artificial Intelligence, Microsoft Outlook, Cyber Security, Machine Learning, Microsoft Office, Microsoft PowerPoint, Secure Coding, Generative AI, Information Technology - **Published:** August 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=5fad3619171c2607 ## About the Role * Preferred: Bachelor's degree in Cybersecurity, Information Security, Information Technology, Risk Management, or similar areas of study from an accredited college or university. OR * a high school diploma combined with strong industry experience and/or candidates currently enrolled in a bachelor's degree program will be considered. * 3+ years of relevant industry experience ideally focused in vendor management, third-party risk management, or related enhanced vendor oversight tasks. * Experience evaluating technology, cybersecurity, privacy, or third-party risks associated with Artificial Intelligence (AI), machine learning, generative AI, or emerging technologies is preferred. * Relevant certifications are preferred, such as CISSP, CISA, CRISC, or equivalent, but are not required. The Extras: * Advanced knowledge of Microsoft Office; including Outlook, Word, Excel, and PowerPoint. * Understanding of Artificial Intelligence (AI), Machine Learning (ML), Generative AI, and related technology risks. * Knowledge of AI governance frameworks and industry best practices. * Familiarity with the NIST Artificial Intelligence Risk Management Framework (NIST AI RMF). * Familiarity with ISO/IEC 42001 Artificial Intelligence Management Systems (AIMS). * Understanding of AI-related regulatory, privacy, security, and ethical considerations. * Experience reviewing AI vendor security questionnaires, AI governance documentation, AI model risk documentation, or AI-related control environments. * Strong analytical and organizational skills. * Effective oral and written communication skills. * Must be a self-driven, team player. * Ability to work independently and as part of a team. * Knowledge of healthcare industry regulations and standards is a plus. ## Description Blue Cross & Blue Shield of Rhode Island is seeking an innovative and detail-oriented security professional to join its Information Security team. This role is responsible for assessing, monitoring, and mitigating security, privacy, compliance, and operational risks associated with third-party vendors, delegates, and AI-enabled solutions. The successful candidate will support the organization's Enhanced Vendor Oversight (EVO) and AI governance programs by conducting risk assessments, reviewing vendor controls and AI use cases, communicating risk findings to stakeholders, supporting remediation efforts, and helping ensure alignment with organizational policies, regulatory requirements, and industry best practices. What you Will Do: * Conduct security, privacy, and risk assessments of third-party vendors, delegates, and AI-enabled solutions to identify potential risks and vulnerabilities. * Collaborate with business and technology stakeholders to ensure third-party and AI-related practices align with organizational policies, regulatory requirements, and governance standards. * Review and analyze security attestations, certifications, and supporting documentation (e.g., SOC 2, HITRUST, ISO certifications) to assess vendor risk. * Maintain vendor and AI risk inventories, portfolios, engagement records, risk assessments, and related documentation. * Evaluate third-party and AI vendor controls related to cybersecurity, data protection, privacy, regulatory compliance, model governance, and secure development practices. * Provide risk mitigation recommendations and support remediation activities to improve vendor and AI security posture. * Support implementation and monitoring of Enhanced Vendor Oversight (EVO), AI governance requirements, standards, and risk management processes. * Stay informed on emerging threats, industry best practices, regulatory developments, and evolving risks related to third-party security, AI, and technology governance., BCBSRI is headquartered in downtown Providence, conveniently located near the train station and bus terminal. We actively support associate well-being and work/life balance and offer the following schedules, based on role: * In-office : onsite 5 days per week * Hybrid: onsite 2-4 days per week * Remote: onsite 0-1 days per week. Permitted to reside in the following states, pending approval from the Human Resources Department: Arizona, Connecticut, Florida, Georgia, Louisiana, Massachusetts, North Carolina, Oklahoma, Rhode Island, South Carolina, Texas, Virginia ## Related Videos - [Developing the Rich Text Editor for DeepL.com](https://www.wearedevelopers.com/videos/1172-developing-the-rich-text-editor-for-deepl-com) - [Your imaginations is (no longer) the limit: how Generative AI empowers people to be creative](https://www.wearedevelopers.com/videos/741-your-imaginations-is-no-longer-the-limit-how-generative-ai-empowers-people-to-be-creative) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [AI in High-Stakes Industries: Lessons Learned](https://www.wearedevelopers.com/videos/100253-ai-in-high-stakes-industries-lessons-learned) - [GenAI Is a Junior Dev With Root Access](https://www.wearedevelopers.com/videos/100191-genai-is-a-junior-dev-with-root-access) - [The shadows that follow the AI generative models](https://www.wearedevelopers.com/videos/624-the-shadows-that-follow-the-ai-generative-models) ## Related Articles - [What Industries Outside of AI Are Hiring The Most AI Experts?](https://www.wearedevelopers.com/magazine/98-what-industries-outside-of-ai-are-hiring-the-most-ai-experts) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Will AI replace Software Engineers?](https://www.wearedevelopers.com/magazine/340-will-ai-replace-software-engineers) - [How to start an AI project for a good cause and boost your career](https://www.wearedevelopers.com/magazine/15-how-to-start-an-ai-project-for-a-good-cause-and-boost-your-career)