Information Security Analyst

University-of-California,-Riversid; Riverside (CA); Hybrid; USD 88,000 - 162,000; Full time

Job summary

University of California, Riverside is seeking an Information Security Analyst to implement the governance, risk management, compliance, and awareness program across the Information Security Office. You will conduct risk assessments, coordinate audits, and maintain policies to safeguard information and resources.

The role includes vulnerability assessments and security reviews to verify configurations meet standards, with responsibility for risk mitigation recommendations.

Qualifications

• Governance, risk management and compliance knowledge.
• Ability to design and implement security awareness programs.
• Experience in performing risk assessments and coordinating audits.
• Familiarity with vulnerability assessments and security reviews.

Responsibilities

• Implement the Information Security Office governance, risk management, compliance, and awareness program.
• Conduct risk assessments and coordinate audit engagements with relevant parties.
• Maintain and update information security policies, standards and procedures.
• Manage information security awareness training across the university.
• Conduct vulnerability scans and penetration tests to identify deviations from standards.
• Assess risk levels and recommend appropriate mitigation controls.

Skills

Information security

Risk management

Governance and compliance

Vulnerability assessment

Tools

Vulnerability scanners

Penetration testing

Job description

Overview

• Job ID 37879163
• Category Information Technology
• Organization Info Technology Solutions
• Department IT Risk Management Dept
• Location Remote/Hybrid
• Salary $88,302 - $162,426
• Date Posted August 20, 2026
• Application Deadline Open Until Filled
• Schedule 8AM - 5PM
• Full/Part Time Full-time(100%)
• Level of Supervision General Supervision
• Personnel Program Code Professional & Support Staff
• Other Information Qualifies for Employee Referral Bonus: No, UC Internal Job: No

Position Information

The Information Security Analyst is responsible for the implementation of the Information Security Office governance, risk management, compliance, and awareness program. The position will conduct risk assessments; coordinate audit engagements with relevant parties; maintain policies, standards and procedures designed to safeguard information and resources; manage information security awareness training. In addition, conduct vulnerability assessments and security reviews through vulnerability scans and penetration tests to determine deviations from acceptable configurations, policies, and standards. Finally, the incumbent will assess levels of risk and recommend appropriate mitigation controls.This position is classified as predominantly remote with occasional visits to campus as needed. Working hours will be based on Pacific Standard Time (PST).The full salary range for the Information Security Analyst is $88,301.52 - $162,425.52 annually. However, the pay scale for this position is up to $121,785.30 annually. We base salary offers on a variety of considerations, such as education, licensure and certifications, experience, and other business and organizational needs.Applicants must have current work authorization when accepting a UCR staff position. Currently, UCR is unable to sponsor or take over sponsorship of an employment Visa for staff.As a University employee, you will be required to comply with all applicable University policies and/or collective bargaining agreements, as may be amended from time to time. Federal, state, or local government directives may impose additional requirements.