Information Security Risk Analyst

Job Summary

Supporting the identification and assessment of information security risks, the full-time remote Information Security Risk Analyst will conduct risk analyses, maintain risk records, and collaborate with various stakeholders to enhance the University's security posture.

Key responsibilities

• Conduct qualitative and quantitative information security risk assessments to identify threats and vulnerabilities
• Maintain accurate risk records and documentation within the GRC platform to ensure compliance with risk management processes
• Collaborate with stakeholders to coordinate risk mitigation activities and track remediation efforts in alignment with regulatory requirements

Required qualifications

• 3+ years of experience in a related field
• Bachelor's degree
• Experience supporting information security risk management activities for a large enterprise
• Working knowledge of NIST Risk Management Framework (RMF) and common information security practices
• Familiarity with higher education industry standards and regulations (e.g., GLBA, FERPA)