Security Risk Analyst (AI Security Focus) - 26-01773

Security Risk Analyst (AI Security Focus) – Remote (NY) | 6-Month Contract Title: Security Risk Analyst Location: Remote – New York Duration: 6 Months Position Overview The EITS Security Risk Analyst serves as a key liaison between the CISO’s strategic initiatives and the technical IT teams responsible for implementation. This role focuses on enterprise-wide security risk management, with a strong emphasis on AI security review and AI adaptation risk assessments. The analyst will translate business risk requirements into technical control specifications, develop performance metrics, and ensure consistent delivery of information security and risk management services across the organization. This position operates at an enterprise level within Information Security & Risk Management and serves as a subject matter expert (SME) on regulatory compliance and healthcare data privacy. Key Responsibilities • Maintain and enforce enterprise information security and risk management framework/methodology • Conduct enterprise risk analysis and implement risk mitigation strategies • Lead AI security reviews and evaluate AI adoption risks across systems • Assess current and emerging threat landscapes and provide risk reporting to the CISO • Develop and document risk governance methodologies, policies, processes, and procedures • Conduct enterprise-wide security risk assessments and gap analyses for new technologies and products • Track risk reviews, risk acceptances, and security exceptions in GRC tools • Partner with enterprise architecture and IT leadership to align business, technical, and security requirements • Support implementation of technical security controls aligned with regulatory and audit requirements • Serve as SME for EMR and PHI-related security risks • Participate in audits (operational, legal/compliance, reputational, information security) • Support planning and execution of remediation strategies • Facilitate cross-functional meetings and provide leadership reporting • Stay current on evolving cybersecurity threats, AI risks, and healthcare regulations Required Qualifications • Minimum 7+ years IT experience • At least 5 years dedicated to IT Security Risk Management, Risk Audit/Assessment, Security, or Data Privacy Investigations • Minimum 2 years in supervisory capacity • Strong background in AI security reviews and AI adaptation risk analysis • Healthcare industry experience required • Experience working with EMR systems and PHI data privacy • Hands-on experience with GRC tools • Experience reviewing IT solution requirements and security control implementation • Strong analytical and risk mitigation skills Regulatory & Framework Knowledge Required • HIPAA • Joint Commission • CMS • HITECH • NIST CSF • ISO 27001/27002 • PCI DSS • COBIT • State privacy laws Education & Certifications Education: • Bachelor’s degree in Information Systems or related field Preferred Certifications: • CISSP • CISA • CRISC • Other relevant security certifications Preferred Skills • Strong understanding of business impact of security tools and technologies • Ability to design compensating controls for complex vulnerabilities • High degree of integrity and ability to work independently • Experience supporting executive leadership and operational risk committees • Ability to work in fast-moving, cross-functional environments