Information Security Analyst

Job Summary

To support the University's information security initiatives, the full-time Information Security Control Assurance Analyst will lead risk and compliance assessments, develop security documentation, and manage remediation efforts while working 100% remotely from approved states.

Key responsibilities

• Lead information security risk and compliance assessments to evaluate security controls across University systems
• Develop and maintain System Security Plans (SSPs) and related documentation in compliance with security frameworks
• Manage Plans of Action and Milestones (POA&Ms), tracking remediation activities and reporting progress to stakeholders

Required qualifications

• 3 years of experience in a related field
• Bachelor's Degree or progress toward a degree in a related field, or equivalent experience in lieu of a degree
• Strong knowledge of information security governance, risk management, and compliance principles
• Familiarity with NIST frameworks and federal/state regulatory requirements related to information security
• Experience supporting internal and external audits, including evidence collection and response coordination