Cyber GRC Lead: Policy, Risk & DR/BC

University of New Hampshire; Keene (NH); On-site; USD 70,000 - 125,000; Full time

Job summary

University System of New Hampshire is seeking a Team Lead for Cybersecurity Governance, Risk, and Compliance (GRC) to oversee policy development, risk assessments, and third-party reviews. The role emphasizes coordinating with stakeholders, maintaining policy currency, and guiding incident response planning.

The position focuses on governance, risk management, and compliance across USNH services, supporting awareness initiatives and disaster recovery planning.

Qualifications

• Bachelor’s degree and four years of experience in information technology/cybersecurity.
• Broad knowledge of cybersecurity subject areas.
• IT contingency planning and incident response knowledge.
• Experience working in managed project teams.
• Strong organizational skills and attention to detail.
• Excellent written and verbal communication abilities.
• Ability to present information with minimal oversight.
• Sound judgment within defined practices and processes.
• Ability to coordinate multiple priorities in a dynamic environment.
• Effective time management for daily tasks.
• Ability to work independently and in teams.

Responsibilities

• Develop and publish cybersecurity policies and standards aligned with NIST CSF and 800-53/171.
• Coordinate policy review sessions with stakeholders and monitor program health.
• Draft updated policies for evolving threats and business needs.
• Maintain annual review cycles for policies and standards.
• Oversee third-party vendor security assessments and SAR processes.
• Coordinate risk assessments from external contractors and internal units.
• Support risk analysis and maintain risk registers with metrics.
• Develop information handling standards for regulated data across USNH.
• Assist with disaster recovery and business continuity planning and testing.
• Develop and deliver cybersecurity awareness and training programs.
• Lead phishing awareness activities, simulations, and metrics reporting.
• Oversee incident response record keeping and after-action reviews.
• Contribute to incident response planning and drills.

Skills

Broad cybersecurity knowledge

Disaster recovery

Incident response

Project coordination

Strong communication

Time management

Independent work

Team collaboration

Education

Bachelor’s degree with IT/cybersecurity experience

Job description

University System of New Hampshire is seeking a Team Lead for Cybersecurity Governance, Risk, and Compliance (GRC) to oversee policy development, risk assessments, and third-party reviews. The role emphasizes coordinating with stakeholders, maintaining policy currency, and guiding incident response planning.

The position focuses on governance, risk management, and compliance across USNH services, supporting awareness initiatives and disaster recovery planning.