Senior Information Security Risk Analyst

Job overview

The Senior Information Security Risk Analyst role is remote, work-from-home, for eligible applicants in the United States, with Eastern Time business hours; the final interview round is onsite in Chattanooga, TN. Compensation is not specified. The role is on BlueCross BlueShield of Tennessee’s Governance, Risk & Compliance team and also supports a high-visibility Data Governance initiative. The analyst strengthens application security risk management, vulnerability oversight, and enterprise data governance. By coordinating audits, maintaining control frameworks, assessing risks, and translating technical findings into practical business actions, the role supports the organization’s security posture and compliance responsibilities.

What you'll do

• Coordinate SOC 2 audit evidence collection, control validation, and auditor engagement
• maintain control documentation, mappings, and narratives
• track audit findings and remediation
• develop and maintain NIST System Security Plans
• manage security awareness initiatives
• oversee security policies and governance documentation
• conduct enterprise and third-party risk assessments
• maintain risk registers
• track vulnerability remediation against service-level agreements
• respond to customer security questionnaires and requests for proposals
• support governance initiatives and collaboration across teams.

What we're looking for

Skills & competencies

senior information security risk analyst

remote

united states

bluecross blueshield of tennessee

governance risk & compliance

application security

sast/dast

soc 2

nist

data governance

third-party risk

on-call rotation

eastern time

Work arrangement

• Weekend coverage required

Why this role

Required participation in an on-call rotation for two weeks every 22 weeks. Sponsorship is not available. Remote hiring excludes California, Massachusetts, New Hampshire, New Jersey, and New York.

About the employer

BlueCross BlueShield of Tennessee is hiring for this role. Industry: Direct Health and Medical Insurance Carriers. Sector: 52.