IT Risk & Compliance Analyst: Security & Resilience

Socket.dev; United States; Remote; USD 76,000 - 114,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) retirement benefit

Employee Stock Purchase Plan

Paid time off

Tuition assistance

Well-being incentives

Job summary

SEI is seeking an IT Risk Management Analyst to safeguard and strengthen the organization's IT systems and data. You will identify risks, assess threats, and implement mitigation strategies, while ensuring compliance with GDPR, FERPA, HIPAA, NIST and ISO 27001.

You will collaborate with IT and security teams, prepare risk reports for leadership, and contribute to awareness programs and policy development. Some travel may be required, and the role may involve on-site work at corporate or campus

Qualifications

• Understanding of IT risk management principles, cybersecurity concepts, and industry standards.
• Proficiency in risk assessment methodologies, vulnerability assessment tools, and security frameworks.
• Excellent analytical and problem-solving skills, with the ability to assess complex situations and provide practical solutions.
• Effective communication skills to convey technical information clearly to both technical and non-technical stakeholders.
• Collaborative attitude with the ability to work across different teams and departments.
• Experience with security incident response and familiarity with security tools and technologies.

Responsibilities

• Identify and assess potential IT risks, including cybersecurity threats, vulnerabilities, and compliance gaps.
• Conduct risk assessments to evaluate the potential impact and likelihood of identified risks.
• Analyze and interpret data related to IT security incidents, breaches, and vulnerabilities.
• Develop and implement risk mitigation plans to address identified vulnerabilities and threats.
• Collaborate with IT and security teams to design and implement controls to reduce the organization's exposure to risks.
• Stay up-to-date with emerging security threats and industry best practices to enhance the effectiveness of risk mitigation strategies.
• Monitor and ensure compliance with relevant IT regulations, standards, and frameworks (e.g., GDPR, FERPA, FFIEC, HIPAA, NIST, ISO 27001).
• Assist in the development and maintenance of IT policies, procedures, and guidelines to ensure adherence to compliance requirements.
• Participate in incident response activities, providing expertise in analyzing and mitigating security incidents.
• Collaborate with incident response teams to investigate and remediate security breaches or vulnerabilities.
• Prepare and present reports on IT risks, vulnerabilities, and mitigation efforts to management and relevant stakeholders.
• Communicate complex technical concepts to non-technical audiences effectively.
• Assist in developing and delivering IT security awareness programs to educate employees about security best practices.
• Provide guidance and training to employees regarding risk management procedures and policies.
• Identify areas for process improvements and recommend solutions to enhance the overall IT risk management program.
• Participate in the evaluation and implementation of new technologies and tools to enhance risk assessment and mitigation capabilities.

Skills

IT risk management

cybersecurity concepts

risk assessment

data analysis

incident response

clear communication

cross-team collaboration

Education

Bachelor's degree in Information Technology, Cybersecurity, Business, or related field

Tools

GRC tools

security incident tools

Job description

SEI is seeking an IT Risk Management Analyst to safeguard and strengthen the organization's IT systems and data. You will identify risks, assess threats, and implement mitigation strategies, while ensuring compliance with GDPR, FERPA, HIPAA, NIST and ISO 27001.

You will collaborate with IT and security teams, prepare risk reports for leadership, and contribute to awareness programs and policy development. Some travel may be required, and the role may involve on-site work at corporate or campus