Information Security Risk Analyst

Rutgers University; New Brunswick (NJ); On-site; USD 108,000 - 165,000; Full time

Job summary

Rutgers University in New Jersey is seeking an Information Security Risk Analyst to support the Office of Information Security (OIT). You will facilitate and evaluate internal and third-party risk assessments, provide remediation recommendations, and maintain a formal risk register across campus.

You will collaborate with students, faculty and staff, serve as an SME on vendor and application findings, and help develop policies to reduce information security risk, with preferred CISSP/CRISC

Qualifications

• Bachelor's degree with at least five years of relevant experience.
• Preferred CISSP or CRISC certifications.
• Experience with HIPAA, GLBA, PCI DSS and NIST CSF.
• Knowledge of risk assessments and risk registers.
• Experience collaborating with campus stakeholders.

Responsibilities

• Conduct and evaluate internal and third-party information security risk assessments.
• Recommend remediation to mitigate gaps and raise awareness of security resources.
• Maintain a formal risk register aligned with security governance.
• Collaborate with campus stakeholders to document and communicate risks.
• Serve as SME for findings from security assessments of vendors and applications.
• Assist in creating policies and procedures to reduce information security risk.

Skills

Risk assessments

Stakeholder comms

Governance & risk

NIST CSF

Regulatory knowledge

Education

Bachelor's degree in Computer Science, Information Systems, or related field

Tools

GRC platforms

Vendor risk mgmt tools

Job description

Rutgers University is hiring an Information Security Risk Analyst for the Office of Information Security (OIT). This role requires facilitating and evaluating internal and third-party information security risk assessments, providing risk remediation recommendations, maintaining a formal risk register, and collaborating with stakeholders across campus to ensure risks are well documented and communicated.

Highlights

• Conduct and evaluate internal and third-party information security risk assessments.
• Recommend risk remediation to mitigate control gaps and raise awareness of security resources.
• Maintain a formal risk register supporting security governance aligned with business goals.
• Serve as a subject matter expert for managing findings from security assessments of vendors and applications.
• Assist in creating policies and procedures to reduce information security risk.
• Required knowledge of HIPAA, GLBA, PCI DSS, and frameworks like NIST CSF.
• Minimum of a bachelor's degree in Computer Science, Information Systems, or related field with at least five years of relevant experience.
• Preferred certifications include CISSP or CRISC; experience with GRC or Vendor Risk Management platforms.
• Salary range from $108,147 to $165,471 depending on qualifications and experience.
• Works across Rutgers University campuses engaging with technical and non-technical stakeholders including students, faculty, and staff.