GRC Analyst

Pay Range: Targeted salary $45,600 - $60,400 annually, depending on education and experience


Benefits Eligible: Yes


Work Schedule: Monday - Friday, Standard/Fixed Schedule


Travel: May be required


Position Introduction:


Are you a driven IT professional continuously looking for innovative ways to fine-tune processes and systems? Join a team where dynamic work, real impact, and a wealth of career opportunities are all part of the job.

The GRC Analyst is responsible for performing governance, risk, and compliance tasks related to end user devices. The GRC Analyst will research industry compliance regulations and policies to recommend baseline security standards, conduct risk analysis, monitor compliance with regulations and institutional policies and provide actionable guidance to users or IT employees to remediate compliance gaps, and create procedures for IT employees and training materials related to secure end point management.


View full job description


Required Education and Experience:

• Bachelor's Degree in Computer Science, Information Technology, or related field.

Equivalency/Substitution : Experience or a combination of education & related experience can be considered in lieu of degree. A one-to-one ratio is used to determine the number of years of experience required in place of a degree.


Department Preferences:

• Ability to perform effectively in high-pressure, fast-paced environments.
• In-depth understanding of cybersecurity frameworks and standards.
• Strong verbal and written communication skills, with the ability to convey complex information clearly to both technical and non-technical audiences.
• Excellent interpersonal and mentoring skills, with the ability to teach and guide others.
• Familiarity with regulatory and compliance requirements.
• Understanding of network and system architecture, including common security configurations and vulnerabilities.
• Strong analytical and problem-solving skills for identifying security risks and evaluating mitigation strategies.
• Skilled in using risk assessment and compliance tools, vulnerability scanners, and GRC platforms.
• Ability to effectively interpret and apply security policies, procedures, and technical standards.
• Ability to assess technical environments for compliance with security and privacy requirements.
• Ability to maintain confidentiality and handle sensitive information with discretion.
• Ability to adapt to changing technologies, threats, and regulatory landscapes.

Hiring Contingent Upon a Background Check: Yes

Norman Campus: If you are selected as a finalist for a position that supports the Norman Campus, you will be subject to The University of Oklahoma Norman Campus Tuberculosis Testing policy .


Why You Belong at the University of Oklahoma: The University of Oklahoma values our community's unique talents, perspectives, and experiences. At OU, we aspire to harness our innovation, creativity, and collaboration for the advancement of people everywhere. You Belong Here!

Equal Employment Opportunity Statement: The University, in compliance with all applicable federal and state laws and regulations, does not discriminate on the basis of race, color, national origin, sex, sexual orientation, marital status, genetic information, gender identity/expression (consistent with applicable law), age (40 or older), religion, disability, political beliefs, or status as a veteran in any of its policies, practices, or procedures. This includes but is not limited to admissions, employment, housing, financial aid, and educational services.