> Markdown version of [/jobs/ext/4673110-security-risk-analyst](https://www.wearedevelopers.com/jobs/ext/4673110-security-risk-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Risk Analyst

- **Company:** HonorVet Technologies
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Contract
- **Skills:** Cyber Security, Network Security, Information Technology, Data Management
- **Published:** November 11, 2026
- **Apply:** https://www.dice.com/job-detail/3f296f48-d91d-4c76-92ca-d1bd41fd9279

## About the Role

* 5 years of Thorough knowledge of mainstream operating systems/security technologies, including network security appliances/identity and access management/cryptography.
 * 3 years of Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
 * 3 years of Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
 * 3 years of Ability to prioritize and summarize risk assessment status to project managers and executive leadership.
 * Professional certifications such as CISSP or CISM.
 * Experience performing NIST 800-53 based risk assessments.
 * Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework

Minimum Education/Experience:

 * Bachelor's degree in computer science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR Associate degree in Computer Science or a related IT field and three years of progressive experience; OR An equivalent combination of education and experience.

 * Experience completing HITRUST risk assessments.

## Description

The Information Security Risk Analyst is responsible for performing an annual third-party risk assessment (TPA) of a technical implementation vendor. The basis of the assessment is the Statewide Information Security Manual. The role will work with a lead analyst to perform the assessment and will own the delivery of System and Data Inventory, a Risk Registry, Risk Assessment Report (RAR).