Cyber GRC Lead: Policy, Risk & DR Management

University of New Hampshire; Durham (NH); On-site; USD 70,000 - 125,000; Full time

Job summary

University of New Hampshire is seeking a Team Lead for Cybersecurity Governance, Risk, and Compliance (GRC) to coordinate risk management frameworks (NIST CSF) and support compliance with CMMC, FERPA, GLBA, HIPAA, and PCI DSS. You will prepare quantitative risk and compliance metrics for the CISO/CIO and oversee policy drafting across security domains.

The role includes incident response coordination, third‑party assessments, awareness training, and oversight of disaster recovery planning.

Qualifications

• Bachelor’s degree and four years of experience in information technology/cybersecurity.
• Broad range of cybersecurity subject areas.
• Knowledge of IT contingency planning (disaster recovery/business continuity, incident response).
• Experience working in managed project teams.
• Strong organizational skills and attention to detail.
• Excellent oral and written communication with minimal oversight.
• Ability to coordinate multiple priorities in a dynamic environment.

Responsibilities

• Develop and publish cybersecurity policies and standards aligned with NIST CSF and 800-53/171.
• Coordinate policy reviews and maintain an annual policy cycle.
• Oversee third-party vendor security assessments and SAR processes.
• Lead risk assessments, risk register management, and metrics reporting.
• Coordinate disaster recovery and business continuity planning and testing.
• Deliver cybersecurity training programs and phishing-awareness activities.
• Oversee incident response record keeping and after-action reviews.
• Support other information security projects as needed.

Skills

Broad cybersecurity knowledge

Project coordination

Strong communication

Information security governance

Risk management

Time management

Team collaboration

Education

Bachelor’s degree

Job description

University of New Hampshire is seeking a Team Lead for Cybersecurity Governance, Risk, and Compliance (GRC) to coordinate risk management frameworks (NIST CSF) and support compliance with CMMC, FERPA, GLBA, HIPAA, and PCI DSS. You will prepare quantitative risk and compliance metrics for the CISO/CIO and oversee policy drafting across security domains.

The role includes incident response coordination, third‑party assessments, awareness training, and oversight of disaster recovery planning.