Cybersecurity Governance, Risk, and Compliance (GRC) Analyst

The Cybersecurity Governance, Risk, and Compliance (GRC) Analyst supports the University's information security governance, risk management, compliance, and cybersecurity awareness programs. The position collaborates with academic and administrative departments, Information Technology, external auditors, and third-party vendors to identify and assess cybersecurity risks, evaluate control effectiveness, support regulatory compliance, and promote sound information security practices across the University.

The GRC Analyst serves as a key liaison between technical and non-technical stakeholders and helps ensure alignment between cybersecurity activities, institutional objectives, risk management priorities, regulatory obligations, and recognized industry frameworks. The University's cybersecurity program is aligned with the NIST Cybersecurity Framework (CSF) 2.0, and this position supports continued maturity across the Govern, Identify, Protect, Detect, Respond, and Recover functions.