Cybersecurity Awareness & Risk Analyst

UCSF Health, AG; San Francisco (CA); On-site; USD 95,000 - 140,000; Full time

Job summary

UCSF Health seeks an experienced Cybersecurity Analyst to join its Cyber Risk Management team, advancing human risk programs, security awareness, phishing simulations, and cross‑functional security initiatives in a complex academic, healthcare, and research environment.

The role emphasizes translating security risks into practical guidance for diverse users, supporting governance, risk, compliance, and incident prevention while collaborating with IT, Privacy, and research stakeholders.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Education, Communications, or a related field (or equivalent experience).
• Minimum related experience, 5+ years
• Ability to translate complex security concepts into clear messages for diverse audiences
• Broad knowledge of information security principles, risk management and threat landscape
• Familiarity with NIST or similar frameworks; HIPAA/FERPA privacy understanding
• Strong organizational and planning skills; project management experience
• Collaborates cross-functionally with IT, legal/compliance, clinical and academic stakeholders

Responsibilities

• Develop security awareness programs, phishing simulations and training to reduce human risk
• Governance and policy support; align with regulatory requirements (HIPAA, FERPA) and enterprise policies
• Provide training on regulations (HIPAA, data privacy) and IT security concepts
• Create clear communications to reinforce security best practices; represent department at campus events
• Assist Manager and CISO with project planning, audits, risk assessments and campaigns
• Collaborate with UC systemwide security groups and external partners
• Other related duties as assigned; Cybersecurity Research Security support

Skills

Communication

Project management

Security awareness

Security concepts

Cross-functional collaboration

Education

Bachelor's degree

Job description

UCSF Health seeks an experienced Cybersecurity Analyst to join its Cyber Risk Management team, advancing human risk programs, security awareness, phishing simulations, and cross‑functional security initiatives in a complex academic, healthcare, and research environment.

The role emphasizes translating security risks into practical guidance for diverse users, supporting governance, risk, compliance, and incident prevention while collaborating with IT, Privacy, and research stakeholders.