Cybersecurity GRC Lead - Policy, Risk & Compliance

CP01 University System of New Hampshire; Durham (NH); On-site; USD 70,000 - 125,000; Full time

Job summary

The University System of New Hampshire seeks a Team Lead for Cybersecurity Governance, Risk, and Compliance (GRC) to drive policy and standards aligned with the NIST framework. You will coordinate risk management, ensure regulatory compliance (CMMC, FERPA, GLBA, HIPAA, PCI DSS), and prepare quantitative risk metrics for senior leadership.

Responsibilities include overseeing third‑party risk assessments, maintaining a risk register, developing disaster recovery plans, and delivering security

Qualifications

• Bachelor's degree in IT/cybersecurity or equivalent experience.
• Experience across cybersecurity domains and policy development.
• Knowledge of contingency planning (DR/BC, IR).
• Ability to coordinate multiple priorities in dynamic environments.
• Demonstrated project teamwork and clear communication abilities.
• Certifications such as GSEC/SSCP/Security+ are preferred.

Responsibilities

• Develop and publish cybersecurity policies and standards aligned with NIST CSF; review and approve through IT governance.
• Oversee third‑party vendor security assessments; maintain SAR records and communicate updates.
• Lead risk assessments, maintain risk register, and report metrics to stakeholders.
• Coordinate disaster recovery and business continuity planning; test plans and procedures.
• Deliver cybersecurity awareness training and phishing simulations; track program metrics.
• Support other information security projects as needed.

Skills

Policy development

Risk assessment

Project coordination

Oral and written communication

Ability to work independently

Time management

Team collaboration

Education

Bachelor's degree in IT/cybersecurity

GSEC

SSCP

Security+

Tools

NIST CSF

NIST 800-53

NIST 800-171

Job description

The University System of New Hampshire seeks a Team Lead for Cybersecurity Governance, Risk, and Compliance (GRC) to drive policy and standards aligned with the NIST framework. You will coordinate risk management, ensure regulatory compliance (CMMC, FERPA, GLBA, HIPAA, PCI DSS), and prepare quantitative risk metrics for senior leadership.

Responsibilities include overseeing third‑party risk assessments, maintaining a risk register, developing disaster recovery plans, and delivering security