Information Security Risk Analyst: GRC & Vendor Risk

The California State University; Chico, Northern (CA, KY); Hybrid; USD 78,000 - 113,000; Full time

Benefits offered by this job

Tuition fee waiver

Job summary

California State University, Chico is seeking an Information Security Risk Analyst to provide governance, risk and compliance reporting, oversight, and user support for campus systems and data repositories. The role manages GRC tools, risk assessments, and training to meet state and university cyber directives.

The position requires a bachelor’s degree with two years of relevant experience; master’s level credentials in cybersecurity are preferred.

Qualifications

• Bachelor’s degree required or equivalent experience.
• Two years of relevant IT risk or information security experience.
• Equivalent education/experience substitutions allowed year-for-year.

Responsibilities

• Provide functional governance, risk and compliance reporting across campus systems and data repositories.
• Manage GRC tools, risk assessments, and user training for end users.
• Oversee critical vendor risk monitoring and third-party IT security reviews.
• Serve as the primary contact for information security governance and compliance related issues.

Skills

GRC reporting

IT risk management

Information security

Education

Bachelor's degree

Master's degree in Cybersecurity

Tools

GRC tools

Vulnerability management software

PeopleSoft security

Job description

California State University, Chico is seeking an Information Security Risk Analyst to provide governance, risk and compliance reporting, oversight, and user support for campus systems and data repositories. The role manages GRC tools, risk assessments, and training to meet state and university cyber directives.

The position requires a bachelor’s degree with two years of relevant experience; master’s level credentials in cybersecurity are preferred.