GRC & InfoSec Risk Analyst

Thomas Jefferson University; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Tuition assistance

Retirement plans

Flexible spending accounts

Job summary

Thomas Jefferson University seeks an information security professional to contribute to governance, risk, and compliance programs. You will apply policies, perform risk assessments, and promote regulatory alignment across the university.

This role uses data‑driven risk quantification, strengthens resilience, and fosters security awareness through training and exercises, collaborating with multiple units to protect assets and ensure compliant operations.

Qualifications

• Bachelor’s Degree in a science, technology, engineering, or math discipline or High School Diploma/GED and preferred certifications.
• 3 years related work experience.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Apply established enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Synthesize data to inform the team on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment of risk mitigation strategies using risk quantification methodologies, ensuring a coordinated response across business units and with external partners.
• Advance the culture of compliance and resilience by assisting with enterprise-level information security awareness and business resilience training campaigns and tabletop exercises.
• Collaborate with team members to share information, interpret requirements, and resolve issues related to governance, risk and compliance.
• Contribute to the development of key performance indicators and risk quantification to measure and communicate risk trends, compliance metrics, and strategic security objectives within the GRC team.

Skills

GRC knowledge

Risk assessment

Regulatory compliance

Security awareness

Education

Bachelor's level in STEM or related

High School Diploma/GED + certifications

Job description

Thomas Jefferson University seeks an information security professional to contribute to governance, risk, and compliance programs. You will apply policies, perform risk assessments, and promote regulatory alignment across the university.

This role uses data‑driven risk quantification, strengthens resilience, and fosters security awareness through training and exercises, collaborating with multiple units to protect assets and ensure compliant operations.