> Markdown version of [/jobs/ext/4596897-security-risk-analyst](https://www.wearedevelopers.com/jobs/ext/4596897-security-risk-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Risk Analyst

- **Company:** Insight Global
- **Location:** Raleigh, NC, United States
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Identity and Access Management, Network Security, Information Technology, Data Management
- **Published:** November 6, 2026
- **Apply:** https://dejobs.org/x/x/93B1B8F4FA01444F81DAC49145F9DB8D/job/

## About the Role

Minimum Education and Experience * Bachelor's degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR * Associate degree in Computer Science or a related IT field and three years of progressive experience; OR * An equivalent combination of education and experience

Required Qualifications * Professional certifications such as CISSP or CISM. * Experience performing NIST 800-53 based risk assessments. * Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework * Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography. * Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37 * Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors * Ability to prioritize and summarize risk assessment status to project managers and executive leadership. Preferred Qualifications * 4. Experience completing HITRUST risk assessments.

## Description

The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the North Carolina Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).