Campus IT Risk & Information Security Lead

Princeton University; Princeton (NJ); On-site; USD 105,000 - 120,000; Full time

Job summary

Princeton University seeks an IT Risk & Information Security Analyst to strengthen security, privacy, resilience, and continuity across campus services. You will lead IT risk management, information security, data privacy, disaster recovery, incident response, and security awareness, collaborating with USIT, ISO, OIT, and departments.

The role requires translating risk findings into actionable improvements, strong communication, and the ability to bridge policy with technical controls.

Qualifications

• 5+ years of professional IT risk management or information security experience.
• Experience with security incident response and management.
• Knowledge of data classification, data privacy, and handling of regulated data.
• Familiarity with FERPA, GDPR, PCI, or equivalent standards is preferred.
• Proficiency with security testing methods and tooling.

Responsibilities

• Lead IT risk and information security initiatives across University Services.
• Coordinate vulnerability management, incident response, and disaster recovery activities.
• Partner with multiple teams to classify data and ensure secure operations.
• Develop metrics, reports, and training to improve security awareness.
• Support regulatory compliance and security policy alignment.

Skills

IT risk management

Information security

Incident response

Regulatory compliance

Data privacy

Security testing tools

Cross-functional collaboration

Communication skills

Disaster recovery planning

Risk assessment

Education

Bachelor's degree in Information Technology, Cybersecurity, or related field

Job description

Princeton University seeks an IT Risk & Information Security Analyst to strengthen security, privacy, resilience, and continuity across campus services. You will lead IT risk management, information security, data privacy, disaster recovery, incident response, and security awareness, collaborating with USIT, ISO, OIT, and departments.

The role requires translating risk findings into actionable improvements, strong communication, and the ability to bridge policy with technical controls.