Cyber GRC Analyst: Risk, Compliance & Security Oversight

University of La Verne; La Verne (CA); On-site; USD 99,000 - 115,000; Full time

Benefits offered by this job

Health plan

Tuition remission

403(b) retirement plan

Paid time off

Job summary

University of La Verne seeks a Cybersecurity Governance, Risk, and Compliance (GRC) Analyst to support information security governance, risk management, and compliance programs across the university. You will liaise with academic and administrative units, IT, auditors, and vendors to identify risks and promote sound security practices.

The role aligns with the NIST CSF 2.0 framework, helping mature Govern, Identify, Protect, Detect, Respond, and Recover functions while communicating complex

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• At least 3 years of cybersecurity, compliance, auditing, or risk management.
• Experience performing risk assessments and policy-related activities.
• Ability to interpret regulatory requirements and communicate risks.
• Strong analytical, written, verbal, and presentation skills.
• Familiarity with governance, risk, and audit principles.

Responsibilities

• Support governance, risk, and compliance programs across the university.
• Collaborate with departments, IT, auditors, and vendors to assess risks.
• Evaluate controls and promote information security practices.
• Assist in regulatory mapping and regulatory obligation alignment.

Skills

Analytical skills

Communication skills

Presentation skills

Risk management

Cybersecurity knowledge

Regulatory compliance

Education

Bachelor's degree or equivalent in Cybersecurity/Info Systems

3 years cybersecurity/risk management experience

Tools

NIST CSF

NIST 800-53

ISO 27001

PCI DSS

Job description

University of La Verne seeks a Cybersecurity Governance, Risk, and Compliance (GRC) Analyst to support information security governance, risk management, and compliance programs across the university. You will liaise with academic and administrative units, IT, auditors, and vendors to identify risks and promote sound security practices.

The role aligns with the NIST CSF 2.0 framework, helping mature Govern, Identify, Protect, Detect, Respond, and Recover functions while communicating complex