Job Details

This is an opportunity to work with CorVel's tight-knit, dedicated Information Security and Privacy team to contribute to the protection of corporate digital assets and reduce business risk. This role will partner with various lines of business, system and application engineers, and business experts to research and recommend secure solutions, assess technical designs, categorize systems, select controls, provide security governance, and have a lasting and important impact to the business. Opportunity for remote work arrangement.

ESSENTIAL FUNCTIONS & RESPONSIBILITIES:

1. Foster information security practices and procedures across the organization
2. Research, analyze, and formulate recommendations for technologies, products, and solutions to enable business
3. Provide technical inputs, system security controls, evaluate and recommend new and emerging security products and technologies
4. Work with engineering teams to threat model technical designs and implementation of solutions
5. Act as a subject matter expert and partner with other engineers to select appropriate security controls
6. Further mature and maintain vulnerability management processes and metrics
7. Assist with a variety of risk assessments
8. Assist with vendor risk assessments, and provide customer assurance
9. Other duties as assigned

KNOWLEDGE & SKILLS:

1. Team player eager to contribute, even in areas outside of individual ownership
2. Self-starter that sees projects through to completion
3. Operates well under stress and in occasional chaotic environments
4. Exemplifies humility, open-mindedness, empathy, integrity and grit
5. Committed to lifelong learning and personal development
6. Outstanding written and spoken communication skills

EDUCATION & EXPERIENCE:

1. 3 - 5 years of experience in information security
2. Specific experience with two or more of the following areas:
   • Threat modeling
   • Secure system design and development
   • System security assessments
   • Vulnerability management
   • Security risk management
3. Experience with FIPS, NIST 800-53/CSF, or other relevant frameworks
4. Notable cloud security experience
5. Relevant security certification preferred (CC, CompTIA Security+, CISSP, SANS, etc.)

CorVel is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable.