Cybersecurity GRC Analyst

Job Summary

To enhance cybersecurity governance and compliance, the full-time remote Cybersecurity GRC Analyst will manage risk programs, coordinate audits, and develop policies while collaborating across various departments within the University of Maine System.

Key responsibilities

• Manage and support the institutional cybersecurity risk program, including maintaining the risk register and coordinating corrective actions
• Oversee the cybersecurity risk review process for new solutions and services, conducting security risk assessments and documenting findings
• Develop and maintain cybersecurity policies, standards, and compliance documentation while coordinating audit readiness activities

Required qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Risk Management, or a related field, or equivalent experience
• Five years of professional experience in cybersecurity, IT risk management, compliance, or information security program support
• Experience with audit preparation and knowledge of cybersecurity frameworks and standards, including NIST and CIS Controls
• Ability to analyze cybersecurity risks and develop practical mitigation recommendations
• Demonstrated use of AI-assisted tools or automation to improve security workflows and reporting