Senior Security Analyst

Own and operate the university’s Information Security and Privacy Control Requirements (ISPCR) Map institutional policies and controls to industry standards and regulatory requirements, including

NIST SP 800-53

, NIST SP 800-171, CIS Benchmarks, HIPAA, FERPA, GLBA, PCI-DSS, CIS Controls, ISO/IEC 27001, and SOC 2 Develop, refine, and implement compliance practices, processes, maturity models, and key performance metrics Lead complex, large-scope risk assessment initiatives Scope, execute, and oversee Tier 1, Tier 2, and Tier 3 risk assessments across campus infrastructure, cloud environments, third-party vendors, and research data environments Provide technically sound mitigation strategies to system owners, researchers, and technical teams Provide guidance, mentorship, and technical oversight to less experienced colleagues Communicate complex or sensitive risk information to technical and non-technical stakeholders and leadership Facilitate dialogue and persuade stakeholders to adopt secure practices and consider alternative risk-treatment options Requirements Bachelor’s degree in information technology, cyber security, computer science, or a related field (or equivalent professional experience) Minimum of 6 years of direct experience in information security governance, risk, and compliance Broad understanding of identity and access management (IAM), server, networking, application development, and database concepts Final candidates must successfully complete a background check Preferred: 8 to 12 years of relevant governance, risk, and compliance (GRC) experience Preferred: Advanced degree (master’s or equivalent) in a relevant technical or business field Preferred: Active professional certifications such as CISA, CRISC, CISM, CISSP, or equivalent specialized GRC certifications Preferred: Deep specialization in NIST SP 800-53 and HIPAA Security/Privacy Rules Preferred: Expert guidance on securely implementing IAM, server, networking, application development, and database services Core Competencies Demonstrates expertise in Information Security Governance, Risk, and Compliance (GRC) with a strong focus on NIST SP 800-53, HIPAA, and risk assessment methodologies. Capable of developing and implementing compliance practices while effectively communicating complex risk information to diverse stakeholders. Highest-signal resume keywords Information Security Governance Risk Assessment Initiatives NIST SP 800-53 Compliance Practices Development Identity and Access Management ATS Optimization Keywords Hard Skills Information Security Governance Risk Assessment Compliance Practices Identity and Access Management Cloud Environments Database Concepts Networking Concepts Application Development Mitigation Strategies Performance Metrics Soft Skills Mentorship Communication Persuasion Stakeholder Engagement Technical Oversight Certifications & Qualifications CISA

CRISC

CISM

CISSP

Industry Keywords NIST SP 800-171 CIS Benchmarks

HIPAA

FERPA

GLBA

PCI-DSS

CIS Controls

ISO/IEC 27001

SOC 2

Governance, Risk, and Compliance #J-18808-Ljbffr Jobtailor