Cybersecurity Governance, Risk, and Compliance (GRC) Analyst

University of La Verne

La Verne (CA)

On-site

USD 99,000 - 115,000

Full time

6 days ago
Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Health plan
Tuition remission
403(b) retirement plan
Paid time off

Job summary

University of La Verne seeks a Cybersecurity Governance, Risk, and Compliance (GRC) Analyst to support information security governance, risk management, and compliance programs across the university. You will liaise with academic and administrative units, IT, auditors, and vendors to identify risks and promote sound security practices.

The role aligns with the NIST CSF 2.0 framework, helping mature Govern, Identify, Protect, Detect, Respond, and Recover functions while communicating complex

Qualifications

  • Bachelor’s degree in a related field or equivalent experience.
  • At least 3 years of cybersecurity, compliance, auditing, or risk management.
  • Experience performing risk assessments and policy-related activities.
  • Ability to interpret regulatory requirements and communicate risks.
  • Strong analytical, written, verbal, and presentation skills.
  • Familiarity with governance, risk, and audit principles.

Responsibilities

  • Support governance, risk, and compliance programs across the university.
  • Collaborate with departments, IT, auditors, and vendors to assess risks.
  • Evaluate controls and promote information security practices.
  • Assist in regulatory mapping and regulatory obligation alignment.

Skills

Analytical skills
Communication skills
Presentation skills
Risk management
Cybersecurity knowledge
Regulatory compliance

Education

Bachelor's degree or equivalent in Cybersecurity/Info Systems
3 years cybersecurity/risk management experience

Tools

NIST CSF
NIST 800-53
ISO 27001
PCI DSS

Job description

Cybersecurity Governance, Risk, and Compliance (GRC) Analyst
Job Vacancy Announcement

Position Information

Functional Title

Functional Title Cybersecurity Governance, Risk, and Compliance (GRC) Analyst

Position Type

Position Type Administrative/Professional

Appointment Type

Appointment Type Regular

FTE %

100%

Work Schedule (if atypical)

University Overview

Embark on an exciting journey with the University of La Verne, where your career aspirations come to life in a vibrant and welcoming environment. Established in 1891, our diverse and inclusive community is more than just a university—it’s a home for passionate individuals like you.
At the University of La Verne, we embody four core values that set us apart—Ethical Reasoning, Diversity and Inclusivity, Lifelong Learning, and Civic and Community Engagement. If you’re fueled by these principles and are eager to make a meaningful impact, your journey begins here.
With a rich history spanning 132 years, the University of La Verne boasts a global Leo Family of 89,000+ accomplished alumni. As the #1 private university in California for social mobility according to U.S. News and World Report 2024, and recently recognized as the 33rd Best U.S. College by the Wall Street Journal 2024, we take pride in our commitment to excellence in education.
Join us in shaping the future, where your passion meets purpose.

Diversity Statement

The University supports a diverse and inclusive environment where students recognize and benefit from the life experiences and viewpoints of other students, faculty, and staff. Diversity is an active and intentional practice that supports difference and multiplicity to expand knowledge, educate capable citizens, develop the whole person, and serve our local and global communities. Promoting and sustaining diversity is a commitment to educational quality and the creation of positive, respectful learning communities.

Job Description Summary

The Cybersecurity Governance, Risk, and Compliance ( GRC ) Analyst supports the University’s information security governance, risk management, compliance, and cybersecurity awareness programs. The position collaborates with academic and administrative departments, Information Technology, external auditors, and third-party vendors to identify and assess cybersecurity risks, evaluate control effectiveness, support regulatory compliance, and promote sound information security practices across the University.

The GRC Analyst serves as a key liaison between technical and non-technical stakeholders and helps ensure alignment between cybersecurity activities, institutional objectives, risk management priorities, regulatory obligations, and recognized industry frameworks. The University’s cybersecurity program is aligned with the NIST Cybersecurity Framework ( CSF ) 2.0, and this position supports continued maturity across the Govern, Identify, Protect, Detect, Respond, and Recover functions.

Minimum Qualifications
  • Bachelor’s degree in Cybersecurity, Information Systems, Risk Management, Business Administration, or related field, or equivalent combination of education and experience.
  • Three (3) years of progressively responsible experience in cybersecurity, compliance, auditing, risk management, information technology, or related disciplines.
  • Experience conducting risk assessments, compliance reviews, audits, or policy-related activities.
  • Understanding of cybersecurity controls, governance practices, and risk management principles.
  • Knowledge of cybersecurity governance, risk, compliance, and audit principles.
  • Ability to analyze risks and develop practical recommendations.
  • Ability to interpret regulatory and compliance requirements.
  • Strong analytical and critical-thinking skills.
  • Excellent written, verbal, and presentation skills.
  • Ability to effectively communicate cybersecurity risks to technical and non-technical audiences.
  • Strong organizational skills and attention to detail.
  • Ability to manage multiple projects and priorities simultaneously.
  • Ability to maintain confidentiality and exercise sound judgment.
Preferred Qualifications
  • Experience in higher education or another regulated environment.
  • Familiarity with NIST Cybersecurity Framework ( CSF ), NIST 800-53, NIST 800-171, CIS Controls, ISO 27001, or related frameworks.
  • Experience with FERPA , GLBA , PCI - DSS , and privacy regulations.
  • Experience supporting third-party risk management and cybersecurity audits.
  • Security+, CISA , CRISC , CGRC , CISSP , CySA+, or related certifications.
Benefits Summary

Applicants, please note that actual compensation is determined by several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, certifications, relevant education or training, and specific work location, among others. The offered wage or salary is only one aspect of an employee’s total compensation
Benefits include a comprehensive health and wellness plan, tuition remission program for employee, spouse, and dependent children, a generous contribution to the University’s 403B retirement plan, and a generous time off plan.
Employment is contingent upon successful completion and clearance of a background check and employment verification.

Location
Number of Vacancies

Number of Vacancies 1

Physical Demands Summary

The physical demands include the ability to sit, stand, walk, bend, and lift up to 20 pounds occasionally. Clear verbal and written communication is essential, as the position involves frequent interaction with colleagues, clients, or external partners.
The noise level is generally low to moderate. The position may occasionally involve meeting deadlines or managing multiple priorities, which can require sustained focus and mental stamina.

Do the essential functions of this job require lifting?

Do the essential functions of this job require lifting? Yes

If yes, list maximum weight and duration

If yes, list maximum weight and duration 20lbs

Describe work environment

Describe work environment This position is based in a standard office environment and primarily involves sedentary work. Employees are expected to spend extended periods of time working at a desk, using a computer, and engaging in routine office tasks such as emailing, attending m

Duties
Salary Range

Minimum:

Minimum: $98,718.83

Maximum:

Maximum: $115,000.00

Posting Number

Posting Number 2024-251210SA

Special Instructions to Applicants

The University of La Verne is unable to provide sponsorship for work visas at this time. Applicants must be authorized to work in the United States without the need for visa sponsorship now or in the future.

Open Date

Open Date 11/02/2026

Close Date

Open Until Filled No

Posting Specific Questions

Required fields are indicated with an asterisk (*).

  • * How did you hear about this employment opportunity?
    • HigherEdjobs.com
    • AcademicCareers.com
    • University of La Verne Website
    • Referred by University of La Verne Employee
    • Other
Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Cyber GRC Analyst: Risk, Compliance & Security Oversight
Cyber GRC Analyst: Risk, Compliance & Security Oversight

University of La Verne • La Verne (CA)

On-site
USD 99,000 - 115,000
Health plan
Tuition remission
403(b) retirement plan
+1
University Campus Safety Officer
University Campus Safety Officer

University of La Verne • La Verne (CA)

On-site
USD 26,000 - 37,000
Health and wellness plan
Tuition remission program
403B retirement plan
+1
Information Security Analyst
Information Security Analyst

Santa Clara University • Santa Clara (CA)

On-site
USD 103,000 - 129,000
Analyst, Cybersecurity Governance, Risk and Compliance
Analyst, Cybersecurity Governance, Risk and Compliance

Austin Community College • Austin (TX)

On-site
USD 84,000 - 106,000
Administrative Assistant - Office of General Counsel
Administrative Assistant - Office of General Counsel

University of La Verne • La Verne (CA)

On-site
USD 30,000 - 36,000
Health plan
Tuition remission for employee and/ or
403B retirement plan
+1
GRC Analyst
GRC Analyst

The Emery Company, LLC • Houston (TX)

On-site
USD 85,000 - 110,000
Executive Director, Accounting and Treasury
Executive Director, Accounting and Treasury

University of La Verne • La Verne (CA)

On-site
USD 124,000 - 137,000
Health plan
Tuition remission
403B retirement
+1
Information Systems Auditors
Information Systems Auditors

UTN • Salt Lake City (UT)

On-site
USD 64,000 - 124,000
IT Risk & Information Security Analyst
IT Risk & Information Security Analyst

Princeton • Princeton (NJ)

On-site
USD 105,000 - 120,000
Cybersecurity Analyst Tier 3
Cybersecurity Analyst Tier 3

Cybersecurity Jobs • Salt Lake City (UT)

On-site
USD 100,000 - 140,000