Information Security Risk Analyst II – Risk & Compliance

University of Minnesota; Saint Paul (MN); Hybrid; USD 85,000 - 95,000; Full time

Benefits offered by this job

Retirement contributions 10%

Vacation days

Reduced tuition

Health benefits

Wellness program

Disability insurance

Merit increase

Job summary

The University of Minnesota's University Information Security seeks an Information Security Risk Analyst who will improve the information security of the University through information security risk assessments, security standards development, and exception management.

The Information Security Risk Analyst will assess the information security posture of collegiate and administrative units by conducting information security risk assessments, including analyzing security controls and processes,

Qualifications

• Bachelor's degree in a related field and 2 years of relevant work experience or a Master's degree.
• 1 year experience in information security risk assessment, audit, quality assurance, or similar.
• Excellent communication (oral, written, presentation), interpersonal and consultative skills.

Responsibilities

• Perform information security risk assessments and analyze controls using ISO 27001/27002, NIST 800-171 or other frameworks.
• Develop risk remediation plans and coordinate remediation efforts.
• Support risk management by coordinating assessments and consulting with information security staff and architects.
• Communicate security risks in business terms to non-technical leaders in academic units.
• Assist with development and maintenance of security policies, standards, guidelines and procedures.

Skills

Information security risk assessment

Communication skills

Education

Bachelor's degree in related field

Master's degree

Job description

The University of Minnesota's University Information Security seeks an Information Security Risk Analyst who will improve the information security of the University through information security risk assessments, security standards development, and exception management.

The Information Security Risk Analyst will assess the information security posture of collegiate and administrative units by conducting information security risk assessments, including analyzing security controls and processes,