GRC Analyst

In this role, you will serve as a cybersecurity engineering resource supporting multiple initiatives across the security organization. You’ll contribute to both day-to-day operations and engineering efforts, while playing an important role in advancing security initiatives that strengthen our capabilities, reduce risk, improve operational efficiency, and support the continued modernization and maturity of our security program. You’ll work across multiple security domains, partnering with teams throughout the organization as technologies and priorities evolve.

To be successful in this role, in addition to the core job requirements, you’ll bring strong problem-solving skills, the ability to learn new technologies independently, and the flexibility to work across tools rather than specializing in a single product. You will be a strong candidate if you have experience with server security and system hardening, data loss prevention, firewalls, and supporting technical audits as a subject matter expert. Familiarity with Azure, Microsoft Defender, Entra and conditional access policies is also valuable. Strong communication skills and the ability to follow established operational processes with limited supervision are important for success.

Note:

This is remote, work-from-home position, but the final round of interviews will take place on-site in our Chattanooga, TN office.
This role participates in an on-call rotation for one week approximately every seven weeks.
Sponsorship is not available for this role.

Job Responsibilities

Ensures system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification, and accreditation, systems hardening.
Ensures and anticipates Application, Cloud, and Platform security integrations with core security technologies.
Collaborates with the technical teams and cloud service providers to ensure that the results satisfy the needs embodied in the requirements and security best practices are followed.
Ensure compliance with regulations and privacy laws.
Security automation for testing, identity, cloud, and secure configuration baseline monitoring.
Develops and enforces cloud security policies and procedures and provides technical support on information security policies, principles, standards, and procedures.
Implements and manages cloud security solutions to protect cloud-based applications, data, and infrastructure.
Conducts cloud security assessments and audits to identify and mitigate risks.
Employees may be required to participate in a weekly on-call rotation.

Job Qualifications

Education

Bachelor's Degree or equivalent work experience required. Equivalent experience is defined as 4 years of professional work experience in a corporate environment.

Experience

3 years - Experience as an information security engineer or in related field required.
Demonstrated experience configuring and leveraging SSO and step-up authentication to support authorization, including federation services.
Familiarity with cloud security technologies and platforms.
Understanding of cloud security frameworks and compliance standards.

Skills/Certifications

Demonstrated ability to interpret and translate technical and/or or complex concepts into information meaningful to IAM team members and/or business personnel.
Proven analytical and problem-solving skills and ability to perform non-routine analytical tasks.
Ability to document and meet deadlines for projects from milestones to tasks and identify ownership per project with implementation understanding.
Ability to provide Security integration, automation, and configuration efforts with Security oversight for software in the BCBST environment.
Ability to determine Technical Security Baselines and ensure the baselines meet BCBST Policy and Standards.
Proficient understanding of troubleshooting approaches, including knowledge of underlying security tools, networking, server, application, and cloud concepts.
Windows scripting and automation methodology (PowerShell, VBScript, Perl, Batch programming).
Understanding of APIs, databases, and file connections for application connections.
Proven ability to plan, prioritize, organize, configure, and coordinate across multiple applications and systems.
Ability to work independently with minimal supervision or function in a team environment sharing responsibility, roles, and accountability.
Certifications such as Certified Cloud Security Professional (CCSP), AWS Certified Security, Microsoft Azure – Specialty, or equivalent are preferred.

N/A

Number of Openings Available

Worker Type:

Employee

Company:

BCBST BlueCross BlueShield of Tennessee, Inc.

Applying for this job indicates your acknowledgement and understanding of the following statements:

BCBST will recruit, hire, train and promote individuals in all job classifications without regard to race, religion, color, age, sex, national origin,citizenship, pregnancy, veteran status, sexual orientation, physical or mental disability, gender identity, or any other characteristic protected by applicable law.

Further information regarding BCBST's EEO Policies/Notices may be found by reviewing the following page:

BCBST's EEO Policies/Notices

BlueCross BlueShield of Tennessee is not accepting unsolicited assistance from search firms for this employment opportunity. All resumes submitted by search firms to any employee at BlueCross BlueShield of Tennessee via-email, the Internet or any other method without a valid, written Direct Placement Agreement in place for this position from BlueCross BlueShield of Tennessee HR/Talent Acquisition will not be considered. No fee will be paid in the event the applicant is hired by BlueCross BlueShield of Tennessee as a result of the referral or through other means.

Originally posted on Himalayas

Job Description

We are hiring a Cyber Security Engineer to join our Cyber Security Engineering team at BCBST!

Note:

This is remote, work-from-home position, but the final round of interviews will take place on-site in our Chattanooga, TN office.
This role participates in an on-call rotation for one week approximately every seven weeks.
Sponsorship is not available for this role.

Job Responsibilities

Ensures system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification, and accreditation, systems hardening.
Ensures and anticipates Application, Cloud, and Platform security integrations with core security technologies.
Collaborates with the technical teams and cloud service providers to ensure that the results satisfy the needs embodied in the requirements and security best practices are followed.
Ensure compliance with regulations and privacy laws.
Security automation for testing, identity, cloud, and secure configuration baseline monitoring.
Develops and enforces cloud security policies and procedures and provides technical support on information security policies, principles, standards, and procedures.
Implements and manages cloud security solutions to protect cloud-based applications, data, and infrastructure.
Conducts cloud security assessments and audits to identify and mitigate risks.
Employees may be required to participate in a weekly on-call rotation.

Job Qualifications

Education

Bachelor's Degree or equivalent work experience required. Equivalent experience is defined as 4 years of professional work experience in a corporate environment.

Experience

3 years - Experience as an information security engineer or in related field required.
Demonstrated experience configuring and leveraging SSO and step-up authentication to support authorization, including federation services.
Familiarity with cloud security technologies and platforms.
Understanding of cloud security frameworks and compliance standards.

Skills/Certifications

Demonstrated ability to interpret and translate technical and/or or complex concepts into information meaningful to IAM team members and/or business personnel.
Proven analytical and problem-solving skills and ability to perform non-routine analytical tasks.
Ability to document and meet deadlines for projects from milestones to tasks and identify ownership per project with implementation understanding.
Ability to provide Security integration, automation, and configuration efforts with Security oversight for software in the BCBST environment.
Ability to determine Technical Security Baselines and ensure the baselines meet BCBST Policy and Standards.
Proficient understanding of troubleshooting approaches, including knowledge of underlying security tools, networking, server, application, and cloud concepts.
Windows scripting and automation methodology (PowerShell, VBScript, Perl, Batch programming).
Understanding of APIs, databases, and file connections for application connections.
Proven ability to plan, prioritize, organize, configure, and coordinate across multiple applications and systems.
Ability to work independently with minimal supervision or function in a team environment sharing responsibility, roles, and accountability.
Certifications such as Certified Cloud Security Professional (CCSP), AWS Certified Security, Microsoft Azure – Specialty, or equivalent are preferred.

N/A

Number of Openings Available

Worker Type:

Employee

Company:

BCBST BlueCross BlueShield of Tennessee, Inc.

Applying for this job indicates your acknowledgement and understanding of the following statements:

Further information regarding BCBST's EEO Policies/Notices may be found by reviewing the following page:

BCBST's EEO Policies/Notices

Originally posted on Himalayas

Job Description

We are hiring a Cyber Security Engineer to join our Cyber Security Engineering team at BCBST!

Note:

This is remote, work-from-home position, but the final round of interviews will take place on-site in our Chattanooga, TN office.
This role participates in an on-call rotation for one week approximately every seven weeks.
Sponsorship is not available for this role.

Job Responsibilities

Ensures system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification, and accreditation, systems hardening.
Ensures and anticipates Application, Cloud, and Platform security integrations with core security technologies.
Collaborates with the technical teams and cloud service providers to ensure that the results satisfy the needs embodied in the requirements and security best practices are followed.
Ensure compliance with regulations and privacy laws.
Security automation for testing, identity, cloud, and secure configuration baseline monitoring.
Develops and enforces cloud security policies and procedures and provides technical support on information security policies, principles, standards, and procedures.
Implements and manages cloud security solutions to protect cloud-based applications, data, and infrastructure.
Conducts cloud security assessments and audits to identify and mitigate risks.
Employees may be required to participate in a weekly on-call rotation.

Job Qualifications

Education

Bachelor's Degree or equivalent work experience required. Equivalent experience is defined as 4 years of professional work experience in a corporate environment.

Experience

3 years - Experience as an information security engineer or in related field required.
Demonstrated experience configuring and leveraging SSO and step-up authentication to support authorization, including federation services.
Familiarity with cloud security technologies and platforms.
Understanding of cloud security frameworks and compliance standards.

Skills/Certifications

Demonstrated ability to interpret and translate technical and/or or complex concepts into information meaningful to IAM team members and/or business personnel.
Proven analytical and problem-solving skills and ability to perform non-routine analytical tasks.
Ability to document and meet deadlines for projects from milestones to tasks and identify ownership per project with implementation understanding.
Ability to provide Security integration, automation, and configuration efforts with Security oversight for software in the BCBST environment.
Ability to determine Technical Security Baselines and ensure the baselines meet BCBST Policy and Standards.
Proficient understanding of troubleshooting approaches, including knowledge of underlying security tools, networking, server, application, and cloud concepts.
Windows scripting and automation methodology (PowerShell, VBScript, Perl, Batch programming).
Understanding of APIs, databases, and file connections for application connections.
Proven ability to plan, prioritize, organize, configure, and coordinate across multiple applications and systems.
Ability to work independently with minimal supervision or function in a team environment sharing responsibility, roles, and accountability.
Certifications such as Certified Cloud Security Professional (CCSP), AWS Certified Security, Microsoft Azure – Specialty, or equivalent are preferred.

N/A

Number of Openings Available

Worker Type:

Employee

Company:

BCBST BlueCross BlueShield of Tennessee, Inc.

Applying for this job indicates your acknowledgement and understanding of the following statements:

Further information regarding BCBST's EEO Policies/Notices may be found by reviewing the following page:

BCBST's EEO Policies/Notices

Originally posted on Himalayas

Job Description

We are hiring a Cyber Security Engineer to join our Cyber Security Engineering team at BCBST!

Note:

This is remote, work-from-home position, but the final round of interviews will take place on-site in our Chattanooga, TN office.
This role participates in an on-call rotation for one week approximately every seven weeks.
Sponsorship is not available for this role.

Job Responsibilities

Ensures system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification, and accreditation, systems hardening.
Ensures and anticipates Application, Cloud, and Platform security integrations with core security technologies.
Collaborates with the technical teams and cloud service providers to ensure that the results satisfy the needs embodied in the requirements and security best practices are followed.
Ensure compliance with regulations and privacy laws.
Security automation for testing, identity, cloud, and secure configuration baseline monitoring.
Develops and enforces cloud security policies and procedures and provides technical support on information security policies, principles, standards, and procedures.
Implements and manages cloud security solutions to protect cloud-based applications, data, and infrastructure.
Conducts cloud security assessments and audits to identify and mitigate risks.
Employees may be required to participate in a weekly on-call rotation.

Job Qualifications

Education

Bachelor's Degree or equivalent work experience required. Equivalent experience is defined as 4 years of professional work experience in a corporate environment.

Experience

3 years - Experience as an information security engineer or in related field required.
Demonstrated experience configuring and leveraging SSO and step-up authentication to support authorization, including federation services.
Familiarity with cloud security technologies and platforms.
Understanding of cloud security frameworks and compliance standards.

Skills/Certifications

Demonstrated ability to interpret and translate technical and/or or complex concepts into information meaningful to IAM team members and/or business personnel.
Proven analytical and problem-solving skills and ability to perform non-routine analytical tasks.
Ability to document and meet deadlines for projects from milestones to tasks and identify ownership per project with implementation understanding.
Ability to provide Security integration, automation, and configuration efforts with Security oversight for software in the BCBST environment.
Ability to determine Technical Security Baselines and ensure the baselines meet BCBST Policy and Standards.
Proficient understanding of troubleshooting approaches, including knowledge of underlying security tools, networking, server, application, and cloud concepts.
Windows scripting and automation methodology (PowerShell, VBScript, Perl, Batch programming).
Understanding of APIs, databases, and file connections for application connections.
Proven ability to plan, prioritize, organize, configure, and coordinate across multiple applications and systems.
Ability to work independently with minimal supervision or function in a team environment sharing responsibility, roles, and accountability.
Certifications such as Certified Cloud Security Professional (CCSP), AWS Certified Security, Microsoft Azure – Specialty, or equivalent are preferred.

N/A

Number of Openings Available

Worker Type:

Employee

Company:

BCBST BlueCross BlueShield of Tennessee, Inc.

Applying for this job indicates your acknowledgement and understanding of the following statements:

Further information regarding BCBST's EEO Policies/Notices may be found by reviewing the following page:

BCBST's EEO Policies/Notices

Originally posted on Himalayas