Cyber Risk & Compliance Analyst

Strategic Education, Inc; United States; On-site; USD 76,000 - 114,000; Full time

Benefits offered by this job

Tuition assistance

401(k) retirement plan

Employee Stock Purchase Plan

Health, dental, vision insurance

Paid time off

Job summary

Strategic Education, Inc. is seeking an IT Risk Management Analyst to safeguard IT systems and data across the organization. The role focuses on identifying risks, assessing threats, and designing controls with collaboration across IT and security teams.

The ideal candidate will have 3–5 years in a related role and may hold CISSP, CRISC, CISM, or CISA certifications. Occasional travel is possible; an on-site or hybrid work arrangement may be required.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Business, or related field.
• 3–5 years in a similar IT risk/security role.
• Preferred: CISSP, CRISC, CISM, or CISA certifications.
• Willing to travel occasionally; on-site or hybrid work may be required.
• Ability to communicate complex concepts to non-technical stakeholders.

Responsibilities

• Identify and assess potential IT risks, including cybersecurity threats, vulnerabilities, and compliance gaps.
• Develop and implement risk mitigation plans with IT and security teams.
• Monitor and ensure compliance with IT regulations and frameworks (GDPR, FERPA, FFIEC, HIPAA, NIST, ISO 27001).
• Participate in incident response activities and coordinate with response teams.
• Prepare and present reports on IT risks and mitigation to management.
• Assist in IT security awareness programs and training for employees.
• Identify areas for process improvements in the IT risk program and evaluate new technologies.

Skills

IT risk management

Cybersecurity

Risk assessment

Vulnerability assessment

Security frameworks

Analytical thinking

Communication

Collaboration

Incident response

Security tools

Education

Bachelor's degree in Information Technology, Cybersecurity, Business, or related field

Job description

Strategic Education, Inc. is seeking an IT Risk Management Analyst to safeguard IT systems and data across the organization. The role focuses on identifying risks, assessing threats, and designing controls with collaboration across IT and security teams.

The ideal candidate will have 3–5 years in a related role and may hold CISSP, CRISC, CISM, or CISA certifications. Occasional travel is possible; an on-site or hybrid work arrangement may be required.