Information Security Governance, Risk, Compliance, and Privacy Analyst

Southern New Hampshire University; Poland; Remote; PLN 227,000 - 308,000; Full time

Job summary

A higher education institution is seeking an Information Security GRCP Analyst to enhance governance, risk, compliance, and privacy initiatives. This remote role demands coordination of risk management activities, support for compliance programs, and experience in higher education. Benefits include excellent medical plans, paid time off, and a free tuition program. Compensation ranges from $62,712.00 to $84,846.00 depending on skills and experience.

Benefits

High-quality medical insurance

Low to no-cost dental plans

5 weeks of paid time off

Employer-funded retirement

Free tuition program

Parental leave

Mental health resources

Qualifications

• 1+ years of experience in Information Security Governance, Risk, Compliance, and Privacy (GRCP).
• Experience with NIST and financial compliance models.
• Experience working within Higher Education.

Responsibilities

• Maintain policies, standards, and plans within the Information Security Manual.
• Coordinate and process ServiceNow requests.
• Assist for security and privacy awareness activities.

Skills

Information Security Governance

Risk Management

Compliance Standards

Data Privacy

ServiceNow

MS Excel

Documentation Review

Higher Education Experience

Job description

Southern New Hampshire University is a team of innovators. World changers. Individuals who believe in progress with purpose. Since 1932, our people-centered strategy has defined us — and helped us grow a team that now serves over 180,000 learners worldwide.

Our mission to transform lives is made possible by talented people who bring diverse industry experience, backgrounds and skills to the university. And today, we're ready to expand our reach. All we need is you.

Make an impact — from near or far

At SNHU, you'll have the option to work remotely in the following states: Alabama, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, New Hampshire, New Mexico, North Carolina, North Dakota, Ohio, Oklahoma, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, West Virginia, Wisconsin and Wyoming.

We ask that our remote employees have access to a reliable internet connection and a dedicated, properly equipped workspace that is free of distractions. Employees must reside in, and work from, one of the above approved states.

The opportunity

Position Summary:

The Information Security GRCP Analyst will be an important member of the Governance, Risk, Compliance, and Privacy team and advance practice efforts through the coordination of a range of activities related to risk management, data privacy, and compliance practices. Important responsibilities will include task coordination, progress tracking, and updates to ensure program effectiveness. The Information Security GRCP Analyst will play a crucial part in the advancement of the University's mission by supporting risk and compliance programs. You will work remotely from any of our approved states. #LI-Remote

What You'll Do

• Maintain policies, standards, plans, and glossary within the Information Security Manual
• Curate and maintain a repository of information resources to include Federal Student Aid (FSA) Training Center, Center for Information Security (CIS), National Institute of Standards and Technology (NIST).
• Coordinate and process ServiceNow requests coming in to the ITS-Compliance queue
• Help with internal and external audits, and compliance reviews
• Help with System Security Plans (SSP), Plans of Action and Milestones (POAM), and Privacy Impact Analysis (PIA)
• Attend risk analysis meetings, document risk details in the GRCP tool, and follow up
• Report on GRCP metrics
• Review new or updated ISAT courses and provide feedback
• Assist for security and privacy awareness activities such as Cybersecurity Awareness Month, Privacy Week, Tech Fair, and the Information Security Ambassador program
• Support for the Privacy practice in response to data privacy requests
• Other responsibilities, or activities may be assigned

What We're Looking For

• 1+ years of experience in Information Security Governance, Risk, Compliance, and Privacy (GRCP)
• Experience with NIST and financial compliance models
• Experience with MS Excel for reporting and metrics
• Experience with ServiceNow or other ticketing systems
• Experience with risk management, privacy, and compliance standards
• Experience with Grammarly or similar tools for documentation and content review
• Experience working within Higher Education

We believe real innovation comes from inclusion - where different experiences, perspectives and talents are celebrated. So if you're wondering whether SNHU is right for you, take the leap and apply. You might be just the person we're looking for.

Compensation

The annual pay range for this position is $56,752.00 - $90,821.00. Actual offer will be based on skills, qualifications, experience and internal equity, in addition to relevant business considerations. We expect this position to be hired in the following target hiring range $62,712.00 - $84,846.00.

Exceptional benefits (because you’re exceptional)

You’re the whole package. Your benefits should be, too. As a full-time employee at SNHU, you’ll get:

• High-quality, low-deductible medical insurance
• Low to no-cost dental and vision plans
• 5 weeks of paid time off (plus almost a dozen paid holidays)
• Employer-funded retirement
• Free tuition program
• Parental leave
• Mental health and wellbeing resources