Information Security Analyst II

The California State University; Chico, Northern (CA, KY); Hybrid; USD 78,000 - 113,000; Full time

Benefits offered by this job

Tuition fee waiver

Job summary

California State University, Chico is seeking an Information Security Risk Analyst to provide governance, risk and compliance reporting, oversight, and user support for campus systems and data repositories. The role manages GRC tools, risk assessments, and training to meet state and university cyber directives.

The position requires a bachelor’s degree with two years of relevant experience; master’s level credentials in cybersecurity are preferred.

Qualifications

• Bachelor’s degree required or equivalent experience.
• Two years of relevant IT risk or information security experience.
• Equivalent education/experience substitutions allowed year-for-year.

Responsibilities

• Provide functional governance, risk and compliance reporting across campus systems and data repositories.
• Manage GRC tools, risk assessments, and user training for end users.
• Oversee critical vendor risk monitoring and third-party IT security reviews.
• Serve as the primary contact for information security governance and compliance related issues.

Skills

GRC reporting

IT risk management

Information security

Education

Bachelor's degree

Master's degree in Cybersecurity

Tools

GRC tools

Vulnerability management software

PeopleSoft security

Job description

Job/Department Summary:

Under general supervision of the Information Security Officer (ISO}, the Information Security Risk Analyst provides functional governance, risk and compliance (GRC) reporting, oversight and user support for critical campus systems, data repositories, business processes, critical vendors, and partner operations that impact information security and compliance. This position is responsible for ongoing cyber risk management assessment and reporting, IT risk assessment and reporting, critical vendor risk monitoring and serves as the point of contact for information security governance and compliance related issues. Additionally, this position is responsible for managing GRC tools, software, risk assessments, and providing necessary training for end users in support of state and/or locally mandated cyber and information security directives.

Required Education and Experience:

Equivalent to a bachelor’s degree in a related field. Relevant education and/or experience which demonstrates acquired and successfully applied knowledge and abilities shown above may be substituted for the required education on a year-for-year basis.

AND

Two years of relevant experience.

Preferences:

• Master’s Degree in Cybersecurity, Computer Science, information systems, or other job-related field


• Experience working in information technology in a higher education setting


• Experience in Information Security or risk management related position


• Experience related to compliance frameworks (PCI-DSS, GLBA, HIPAA, and FERPA)


• Experience with PeopleSoft security


• Experience using vulnerability management software


• Experience using GRC tools to track/monitor/report cyber risk


• Experience performing third-party IT vendor security risk reviews


• Information Security Certification (CISA, CRISC, CISM, CISSP, CGRC, or comparable cybersecurity, GRC, audit, or compliance certification)

Time Base:

Full-time

Pay Plan:

12/12

CSU Classification Salary Range:

$77,904 (Step 1) - $113,496 (Step 20) per year.

Benefits:

This position qualifies for benefits including tuition fee waiver (if eligible).

Education Code 89521 Requirements: Applicants will be required to disclose whether they have received a final administrative decision or final judicial decision determining that they have committed sexual harassment within the last 7 years only after a determination is made that they meet the minimum qualifications for the position, and before an offer of employment is extended. Applicants who reach the final stages of the application process must also sign a release form that authorizes the release of information by the applicant’s current and/or former employers to the CSU concerning any substantiated allegations of misconduct.

California State University, Chico, in accordance with CSU policy, may require that the successful candidate complete a background check (including a criminal records check, sexual offender registry check, and/or fingerprinting) prior to assuming this position. Failure to satisfactorily complete or pass the background check may impact the job offer or continued employment of current CSU employees who apply for posted positions identified as sensitive.

This position is considered a sensitive position based on CSU guidelines. Incumbent is responsible for the safety and security of Level 1 data, sometimes also referred to as Level 1 protected data. This is confidential information that is in most cases protected by statutes, regulations, or other legal mandates.

About Chico State:

Graduate and undergraduate programs boast high-quality research experiences, exceptional faculty mentoring, and civic and global engagement opportunities. The campus motto, “Today Decides Tomorrow,” is brought to life by inclusive pedagogy, experiential learning, and co-curricular programming. The Chico Experience prepares students to be critical thinkers, engaged citizens, and inspired stewards of environmental, social, and economic resources. Together, they will become leaders solving the challenges of the 21st century.

The campus is located in Northern California, 90 minutes from the state capital, Sacramento, and a three-hour drive from the San Francisco Bay Area. Chico offers year-round natural beauty, outdoor leisure activities, and a thriving arts, music, and events scene. We acknowledge and are mindful that Chico State stands on lands that were originally occupied by the first people of this area, theMechoopda, and we recognize their distinctive spiritual relationship with this land, the flora, the fauna, and the waters that run through campus. We are humbled that our campus resides upon sacred lands that since time immemorial have sustained the Mechoopda people and continue to do so today.

The University is an Equal Opportunity Employer and does not discriminate against persons on the basis of race, religion, color, ancestry, age, disability, genetic information, gender, gender identity, gender expression, marital status, medical condition, National origin, sex, sexual orientation, covered veteran status, or any other protected status.

Chico State is not a sponsoring agency for staff and management positions (i.e. H-1B Visas).

CSU, Chico's Annual Security Report includes summaries of institutional policy relating to campus safety, drug and alcohol use, sexual assault, and other matters. The report is published in compliance with the Clery Act and includes three years of certain crime statistics that occurred in Clery Act defined geography. A paper copy of the report may be requested in person at CSU, Chico Police Department or by calling 530-898-5555 . It is also available on the web at Annual Security & Fire Safety Report .

Open Until Filled (Review of Applications will begin 10/06/26. Applications received after that date may be considered.)