GRC Analyst: Cybersecurity Policy, Risk & Compliance

Austin Community College District; United States; On-site; USD 84,000 - 106,000; Full time

Benefits offered by this job

Medical benefits

Retirement plans

Paid time off

Job summary

Austin Community College District is seeking a GRC Analyst to join the Cybersecurity Governance, Risk and Compliance team. Under supervision, the GRC Analyst will ensure regulatory compliance, manage risks, and develop information security policies across the organization.

You will lead security awareness training, track policy lifecycle, and help foster a security-first culture by collaborating with staff and leadership on best practices in information security.

Qualifications

• Bachelor's degree required in CS/IT or related field; substitution allowed with associate degree plus 2 years of related experience.
• One year of experience in the technology industry is required.
• Preferred: experience in cybersecurity governance, risk and compliance or related roles; experience in a Texas government or government-adjacent organization; experience in FERPA-regulated environments.

Responsibilities

• Develop System Security Plans, Continuous Monitoring, Plan of Action and Milestones, Security Controls Assessment, and Risk Exposure analyses per NIST.
• Contribute to information security policies, standards, and procedures; manage lifecycle of policies.
• Manage exception review and documentation; ensure periodic review of exceptions.
• Update security controls and support stakeholders on controls for internal assessments and FERPA/PII protection.
• Conduct IT security control effectiveness reviews and remediation for identified gaps.
• Collaborate across teams for regular assessments of policies, procedures, and controls to ensure regulatory compliance.
• Prepare detailed assessment reports and monitor corrective actions for sustainability.
• Create information security and cyber awareness training content for all employees; support a role-based training program and phishing campaigns.

Skills

Security awareness training

Policy development

Documentation

Analytical thinking

Strategic planning

Interpersonal skills

Communication skills

Project coordination

Education

Bachelor's degree in computer science, information technology, or related field

Associate’s degree + 2 years related experience substituted for education

Job description

Austin Community College District is seeking a GRC Analyst to join the Cybersecurity Governance, Risk and Compliance team. Under supervision, the GRC Analyst will ensure regulatory compliance, manage risks, and develop information security policies across the organization.

You will lead security awareness training, track policy lifecycle, and help foster a security-first culture by collaborating with staff and leadership on best practices in information security.