Information Security Risk Analyst

Rutgers University; New Brunswick (NJ); On-site; USD 108,147 - 165,471; Full time

Job summary

Rutgers University is seeking an Information Security Risk Analyst to facilitate and evaluate internal and third-party information security risk assessments. You will provide remediation recommendations and maintain a formal risk register while collaborating with campus stakeholders to communicate risks effectively.

This position requires a minimum qualification of a Bachelor's degree in Computer Science or related field with at least five years of experience in Information Security programs. Knowledge of HIPAA, GLBA, and PCI DSS regulations is essential.

Qualifications

• Minimum of five years of experience in Information Security programs.
• Required knowledge of information security regulations.

Responsibilities

• Facilitate and evaluate security risk assessments.
• Provide risk remediation recommendations.
• Maintain the formal risk register.

Skills

Information Security Risk Assessment

Risk Remediation

Collaboration

HIPAA knowledge

GLBA knowledge

PCI DSS knowledge

NIST CSF knowledge

Education

Bachelor's degree in Computer Science or related field

Job description

Rutgers, The State University of New Jersey is hiring an Information Security Risk Analyst for the Office of Information Security. The role involves facilitating and evaluating internal and third-party information security risk assessments, providing remediation recommendations, maintaining a formal risk register, and collaborating with campus stakeholders to ensure risks are well documented and communicated.

Highlights

• Facilitate and evaluate internal and third-party information security risk assessments.
• Provide risk remediation recommendations and promote awareness of supporting resources and technologies.
• Maintain a formal risk register aligned with business objectives to support security governance.
• Serve as a subject matter expert managing findings from information security assessments for vendors and applications.
• Assist in creating policies and procedures to reduce information security risks.
• Required knowledge of HIPAA, GLBA, PCI DSS regulations, and frameworks such as NIST CSF.
• Preferred certifications include CISSP or CRISC.
• Minimum qualification: Bachelor's degree in Computer Science, Information Systems, Management Information Systems or related field with at least five years of experience in Information Security programs.
• Salary range from $108,147 to $165,471 annually, depending on qualifications and experience.
• Work with the Office of Information Security within Rutgers University’s broader IT department.