Description

You will conduct information security assessments and manage risk compliance across the organization.

Responsibilities

• Conduct internal and external risk assessments to identify and assess the severity and potential impact of security risks.
• Provide guidance on the implementation, monitoring, and reporting of control processes, documentation, and compliance measures.
• Communicate complex technical findings and remediation items to risk owners and diverse audiences in an actionable manner.
• Collaborate across multiple disciplines to document and communicate security concepts to students, faculty, staff, and systems personnel.

Required Skills

• 5+ years of experience performing Information Security assessments.
• Working knowledge of HIPAA, GLBA, and PCI DSS regulations.
• Experience with the NIST CSF framework.
• Bachelor’s degree in Computer Science, Information Systems, or Management Information.
• Ability to analyze and document information security concepts for both technical and non-technical users.
• Strong interpersonal and influencing skills for effective cross-organizational collaboration.

Preferred Skills

• CISSP or CRISC certification.
• Knowledge of NIST 800-171 and ISO 27001/27002 standards.
• Experience with Governance, Risk & Compliance (GRC) or Vendor Risk Management platforms.

Key Skills

Education

Bachelor's degree