Apply on Employer Site

Blue Cross and Blue Shield of Alabama · 11 hours ago

Cybersecurity Analyst

Birmingham, AL

Full-time

Hybrid

Mid, Senior Level

2+ years exp

Blue Cross and Blue Shield of Alabama is focused on maintaining the confidentiality and integrity of company information and health data. The Cybersecurity Analyst will assess and manage cybersecurity risks associated with third-party vendors to ensure compliance with security standards and reduce supply chain threats.

Health CareInsurance

Comp. & Benefits

H1B Sponsor Likely

Responsibilities

Conducting detailed cybersecurity risk assessments for high-risk vendors at onboarding and periodically throughout the relationship

Ensuring vendor contracts include appropriate cybersecurity clauses covering data protection, incident response, and compliance obligations

Implementing and maintaining ongoing monitoring of vendor security posture using questionnaires, risk scoring, and automated tools

Documenting and reporting vendor risk metrics, remediation plans, and compliance status to leadership and governance committees

Working closely with procurement, legal, and business units to align vendor risk management with enterprise risk tolerance

Participating in incident planning and response activities involving vendors, including tabletop exercises and post-incident reviews

Incorporating vendor risk considerations into business continuity and disaster recovery planning

Staying current on regulatory requirements and industry standards related to third-party risk management

Qualification

Information SecurityVendor Risk AssessmentCISSPCISAInformation TechnologySupply Chain Risk ManagementAnalytical ThinkingContract ReviewSecurity Best PracticesCommunication SkillsTeam Leadership

Required

Bachelor's degree, preferably in Information Systems or a related field; or in lieu of a degree, 3 years' experience in Information Systems with direct experience in Information Security functions

Minimum of 2 years of information technology experience

Strong background in Information Technology and information security techniques and tools

Excellent human relations, listening, speaking and written communication skills in order to explain and discuss technical risks in both technical and business terms

Experience thinking logically and analytically in order to collect and analyze data in order to guide decision making

Demonstrated and effective team leadership skills in order to lead teams, including developing control strategies, project plans, monitoring progress, and promoting quality and timeliness from the team

Experience creating, understanding and utilizing complex processes

Experience facilitating initiatives that challenge or change existing processes

Preferred

Certified Information Security Professional (CISSP) certification or Certified Information Systems Auditor (CISA) preferred

Experience in contract review for cybersecurity clauses preferred

Knowledge of supply chain risk management and vendor lifecycle processes preferred

Foundational knowledge of core information security concepts, such as multi-factor authentication (MFA), access control, encryption, secure authentication principles and general security best practices preferred

Major professional certification applicable to Information Security preferred

Company

Blue Cross and Blue Shield of Alabama

Glassdoor3.9

Blue Cross and Blue Shield of Alabama is the largest provider of healthcare benefits in Alabama.

Founded in 1936

Birmingham, Alabama, USA

1001-5000 employees

https://www.bcbsal.org

H1B Sponsorship

Blue Cross and Blue Shield of Alabama has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2025 (37)

2024 (19)

2023 (14)

2022 (27)

2021 (21)

2020 (9)