Analyst, Cybersecurity Governance, Risk and Compliance

Austin Community College District; United States; On-site; USD 84,000 - 106,000; Full time

Benefits offered by this job

Medical benefits

Retirement plans

Paid time off

Job summary

Austin Community College District is seeking a GRC Analyst to join the Cybersecurity Governance, Risk and Compliance team. Under supervision, the GRC Analyst will ensure regulatory compliance, manage risks, and develop information security policies across the organization.

You will lead security awareness training, track policy lifecycle, and help foster a security-first culture by collaborating with staff and leadership on best practices in information security.

Qualifications

• Bachelor's degree required in CS/IT or related field; substitution allowed with associate degree plus 2 years of related experience.
• One year of experience in the technology industry is required.
• Preferred: experience in cybersecurity governance, risk and compliance or related roles; experience in a Texas government or government-adjacent organization; experience in FERPA-regulated environments.

Responsibilities

• Develop System Security Plans, Continuous Monitoring, Plan of Action and Milestones, Security Controls Assessment, and Risk Exposure analyses per NIST.
• Contribute to information security policies, standards, and procedures; manage lifecycle of policies.
• Manage exception review and documentation; ensure periodic review of exceptions.
• Update security controls and support stakeholders on controls for internal assessments and FERPA/PII protection.
• Conduct IT security control effectiveness reviews and remediation for identified gaps.
• Collaborate across teams for regular assessments of policies, procedures, and controls to ensure regulatory compliance.
• Prepare detailed assessment reports and monitor corrective actions for sustainability.
• Create information security and cyber awareness training content for all employees; support a role-based training program and phishing campaigns.

Skills

Security awareness training

Policy development

Documentation

Analytical thinking

Strategic planning

Interpersonal skills

Communication skills

Project coordination

Education

Bachelor's degree in computer science, information technology, or related field

Associate’s degree + 2 years related experience substituted for education

Job description

Job Posting Title

Analyst, Cybersecurity Governance, Risk and Compliance Department-Specific Recruitment Details:

Job Description Summary

Under the supervision of the Cybersecurity Operations Manager, the GRC Analyst assumes a pivotal position within the GRC team, ensuring our organization adheres to regulatory frameworks, effectively manages risks, and upholds exemplary governance standards. The GRC Analyst serves as a vital resource for staff and leadership, offering expertise in information security policy development, implementation, interpretation, and compliance. Additionally, they play a crucial role in fostering a security-first culture throughout the organization by spearheading comprehensive training and awareness programs.

Eligibility / Sponsorship

Candidates must be legally authorized to work in the United States without employer sponsorship. The College does not sponsor employment visas or support employment-based immigration petitions for this position, including current or future sponsorship.

Work Requirements

Austin Community College employees are required to maintain a domicile in the State of Texas while working for the college and throughout the duration of employment. - AR 4.0300.01

Duties and Tasks

• Assists with the development of System Security Plans, Continuous Monitoring, Plan of Action and Milestones, Security Controls Assessment, Risk Exposure analysis, all in accordance with TCF/NIST requirements
• Researches, recommends, and contributes to information security policies, standards, and procedure development
• Assists with the lifecycle management of information security policies and supporting documents
• Manages an exception review and approval process, and assures exceptions are documented and periodically reviewed
• Updates security controls and provides support to all stakeholders on information security controls covering internal assessments, regulations, and protecting FERPA and Personally Identifying Information (PII)
• Assists and performs IT security control effectiveness reviews
• Manage remediation efforts for the identified gaps including assessment of new or enhanced implemented controls
• Collaborates with internal teams to conduct regular assessments of information security policies, procedures, and controls to ensure compliance with relevant regulations and standards
• Prepare detailed reports on assessment findings, monitor status updates, and ensure that corrective actions are implemented effectively and sustainability
• Creates information security and cyber awareness communications and training content for all employees
• Supports the development and upkeep of a measured and managed Security and Privacy training program tailored to roles, with oversight of phishing campaigns
• Keeps abreast of security industry trends, emerging threats, pertinent regulatory compliance requirements, and best practices in security
• Participates in cross-functional projects related to risk management, data protection, and security governance
• Conducts third-party supplier risk assessments to oversee supply chain risk across the supplier's lifecycle
• Evaluates and communicates business risks and benefits, and enforces supplier compliance mandates

Knowledge

• Working knowledge of various Security Frameworks, primarily NIST
• Knowledge of information security management, governance, and compliance principles, practices, laws, rules and regulations
• Knowledge of information technology systems and processes, network infrastructure and data architecture
• Knowledge of best practices in security training and awareness

Skills and Experience

• Skills and or/experience in developing/delivering security awareness training either directly or through managed third party providers/tools
• Skills in business process mapping and documentation as well as policy and procedure development
• Recent experience in Information Security with up-to-date knowledge of the current threat landscape
• Analytical, conceptual thinking and strategic planning skills
• Proactive self-starter with the talent to think through technical solutions to potentially open-ended problems
• Maintaining an established work schedule
• Effectively using interpersonal and communications skills
• Effectively using organizational and planning skills with attention to detail and follow-through
• Maintaining confidentiality of work-related information and materials
• Establishing and maintaining effective working relationships, including the ability to coordinate the work of others
• Strong oral and written communication skills and the ability to work well with people from many different disciplines with varying degrees of technical expertise
• Ability to prioritize assignments while working on multiple projects

Required Work Experience

• One year of experience working in the technology industry

Preferred Work Experience

• Work experience specifically in cybersecurity governance, risk and compliance or related roles
• Work experience in a Texas government or government-adjacent organization
• Work experience in an institution that is FERPA regulated
• Working knowledge of the concepts of data privacy regulations, including FERPA requirements or similar regulated data classifications

Required Education

• Bachelor's degree in computer science, Information Technology, or related field
• Four (4) years of related work experience or an Associate’s degree plus two (2) years of related work experience may be substituted for the required education (plus the required experience noted below)

Licenses/Certifications

• Valid Texas Driver's License and reliable transportation for travel in the Austin area as required
• ITIL Foundation-level certification or above preferred but not required
• Relevant certifications such as CISSP, CISA, CRISC are preferred but not required

Physical Requirements

• Work is performed in a standard office or similar environment
• Subject to standing, walking, sitting, bending, reaching, pushing, and pulling
• Occasional lifting of objects up to 10 pounds
• Safety Work safely and follow safety rules
• Report unsafe working conditions and behaviorTake reasonable and prudent actions to prevent others from engaging in unsafe practices

Salary Range (PG 10)

$83,665 - $105,783

Number of Openings

1

Job Posting Close Date

November 17, 2026

Clery Act

As required by the US Department of Education, employees are required to report violations under Title IX and, under the Jeanne Clery Campus Safety Act (Clery Act), select individuals are required to report crimes. If this position is identified as a Campus Security Authority (Clery Act), you will be notified, trained, and provided resources for reporting. Austin Community College produces an Annual Security Report as required by the Clery Act. This report includes statistics from the previous three years concerning reported crime that occurred on campus; public property adjacent to and accessible from campus; and in certain non-campus buildings/property owned or controlled by ACC. The report includes institutional policies concerning campus security and other safety information. For direct access to the current Annual Security Report, visit www.austincc.edu/asr . You may obtain a hard copy by contacting the Clery Compliance Officer ([e-mail] ). For an overview, see ACC's Clery Act website.

Disclaimer

The above description is an overview of the job. It is not intended to be an all-inclusive list of duties and responsibilities of the job, nor is it an all-inclusive list of the skills and abilities required to do the job. Duties and responsibilities may change with business needs. ACC reserves the right to add, change, amend, or delete portions of this job description at any time, with or without notice. Employees may be required to perform other duties as requested, directed, or assigned. In addition, reasonable accommodations may be made by ACC at its discretion to enable individuals with disabilities to perform essential functions of the job.

Company Culture

Come and Make a Difference with Us. Working at ACC offers you an opportunity to be a part of an organization that truly believes in its mission of promoting student success and improving communities. We invite you to learn, explore and experience the many ways ACC promotes individual development and improves the overall quality of life in a vibrant, multicultural community. ACC is looking for people who value open, responsible exchange of ideas, individuals committed to integrity and exemplary standards, and candidates that value personal and professional ownership that generates accountability. ACC offers career employment opportunities as staff, administrators, full‑time faculty, and adjunct faculty.

Equal Opportunity Statement

Austin Community College ("ACC" or "College") is an equal education and equal employment opportunity employer and prohibits discrimination in employment at the college and access to its programs or activities on the basis of race, color, religion, sex (including gender identity, sexual orientation, marital status, and pregnancy), national origin, age (40 and older), veteran status or military service, disability, genetic information or any other basis prohibited by local, state, or federal law. This includes the prohibition of discrimination, including harassment, against any employee, applicant for employment, student, or applicant for admission. ACC will take steps to ensure that the lack of English language skills will not be a barrier to admission and participation in all educational and vocational programs.

Benefits

Full‑time faculty and staff employees who work in full‑time and/or part‑time positions at the college are eligible for ACC medical benefits effective the first of the month after their first 60 days of employment. Benefits include medical, dental, life insurance, short‑ and long‑term disability, retirement plans, and AD&D. ACC does not participate in Social Security. ACC participates in the Teacher Retirement System of Texas (TRS) and the Optional Retirement Program (ORP‑Faculty and Administrators Only). Hourly employees participate in the ACC Money Purchase Plan (ACCMPP) as a retirement program required by federal law.