Company Overview

Nuance is the pioneer and leader in conversational artificial intelligence (AI) innovations that bring intelligence to everyday work and life. We deliver solutions that understand, analyze, and respond to people, amplifying human intelligence to increase productivity and improve security. With decades of both domain and AI expertise, we work with thousands of organizations across a wide range of industries. 

Check out our team Life at Nuance!

Join our team! At Nuance, we are constantly reinventing how people connect with technology and with each other. Our AI-powered solutions empower organizations to transform “business as usual.” For decades, the world’s leading financial, healthcare, telecommunications, retailers, and government organizations have trusted Nuance to bring them award-winning solutions that deliver more meaningful outcomes and empower a smarter, more connected world. From clinical speech recognition technologies that free physicians to spend more time caring for patients to real-time intelligence that powers billions of customer interactions, we’re deeply committed to helping organizations push the boundaries of what’s possible.

Job Summary

Summary:

The Senior Security Risk Analyst is a highly respected, influential and in-demand role within the business. The position is responsible for the Security Risk Management program and collaborating with the Nuance Risk Management program stakeholders for executive risk reporting. This role is a key contributor in supporting the security direction of the business and elevating the company’s security posture. This role is expected to support the security strategy of the business within new and existing information system capabilities. Consequently, the position requires both an understanding of legacy systems, as well as new technologies and requirements, to ensure security risks are appropriately evaluated and managed.

The ideal candidate has a strong understanding of security domains and possesses at least three years of experience in security, compliance or risk management. Communication is critical for this role, as this individual will be working with cross-functional teams from various areas of the business, both technical and non-technical, as well as executive leadership. A strong understanding of industry best practice security frameworks, such as CIS, ISO, and NIST and regulations, such as GDPR, HIPAA, and PCI are critical to the success of this role.

Principal Duties and responsibilities:

• Security Risk Management program lead responsible for risk intake, risk analysis, risk management, and reporting activities.
• Nuance Risk Management team member responsible for supporting CISO in executive reporting.
• Maintain oversight of Security Risk Management program data in a GRC-related platform, including program enhancements.
• Identify strengths and weaknesses in the security program as they relate to privacy, security, business resiliency and compliance frameworks.
• Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.
• Maintain strong oversight of third parties, vendors and business partners to safeguard against undue risk presented by external entities. Escalate to security management and business unit leads when points of weakness are discovered.
• Define qualitative and quantitative metrics to assess the success of the Security Risk Management program and provide regular reports to security and business leadership.
• Perform other duties as assigned.

Knowledge, Skill, Qualification:

• Education: Bachelor’s degree in computer science, information assurance, MIS or related field, or equivalent industry experience
• Years of experinece:  At least 3+ years’ experience in cybersecurity as a risk practitioner with exposure to various security frameworks.

Required Skills:

• Strong business acumen and security technology skills for well-rounded proficiency, as well as proven ability to align with security practices and compliance responsibilities.
• Experience and understanding of various regulatory requirements and laws, including but not limited to PCI, HIPAA, and GDPR. Additional experience in one or more of the following: ISO 27001/2, HITRUST or NIST.
• Exceptional written and verbal communication skills, and proven ability to translate security and risk to all levels of the business.
• Capacity to understand legacy and progressive technology and security controls along with respective risk. Working knowledge of technologies such as cloud computing, DevOps and application security is required.
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.

Preferred Skills:

• Preferred experience with cloud environments such as Microsoft Azure.
• Prior experience with using GRC systems from vendors such as RSA or ServiceNow GRC.
• Demonstrated problem-solving capabilities, and ability to manage complex local and international security requirements.
• Self-motivated, directed and well-organized, with the vision to position controls in anticipation of threats.
• Successful track record of managing external entities’ contracts and relationships, and mitigating risks to business development opportunities.

Additional Information

Nuance offers a compelling and rewarding work environment. We offer market competitive salaries, bonus, equity, benefits, meaningful growth and development opportunities and a casual yet technically challenging work environment. Join our dynamic, entrepreneurial team and become part of our continuing success.

Nuance celebrates diversity and is proud to be an equal employment opportunity and affirmative action workplace. We consider all qualified applicants without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, military and veteran status, disability, genetics, or any other category protected by law or Nuance policy.  If you need an accommodation because of a disability for any part of the employment process, please call 781-565-5086 and let us know.