IT Risk Management Analyst

Strategic Education, Inc; United States; On-site; USD 76,000 - 114,000; Full time

Benefits offered by this job

Tuition assistance

401(k) retirement plan

Employee Stock Purchase Plan

Health, dental, vision insurance

Paid time off

Job summary

Strategic Education, Inc. is seeking an IT Risk Management Analyst to safeguard IT systems and data across the organization. The role focuses on identifying risks, assessing threats, and designing controls with collaboration across IT and security teams.

The ideal candidate will have 3–5 years in a related role and may hold CISSP, CRISC, CISM, or CISA certifications. Occasional travel is possible; an on-site or hybrid work arrangement may be required.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Business, or related field.
• 3–5 years in a similar IT risk/security role.
• Preferred: CISSP, CRISC, CISM, or CISA certifications.
• Willing to travel occasionally; on-site or hybrid work may be required.
• Ability to communicate complex concepts to non-technical stakeholders.

Responsibilities

• Identify and assess potential IT risks, including cybersecurity threats, vulnerabilities, and compliance gaps.
• Develop and implement risk mitigation plans with IT and security teams.
• Monitor and ensure compliance with IT regulations and frameworks (GDPR, FERPA, FFIEC, HIPAA, NIST, ISO 27001).
• Participate in incident response activities and coordinate with response teams.
• Prepare and present reports on IT risks and mitigation to management.
• Assist in IT security awareness programs and training for employees.
• Identify areas for process improvements in the IT risk program and evaluate new technologies.

Skills

IT risk management

Cybersecurity

Risk assessment

Vulnerability assessment

Security frameworks

Analytical thinking

Communication

Collaboration

Incident response

Security tools

Education

Bachelor's degree in Information Technology, Cybersecurity, Business, or related field

Job description

The IT Risk Management Analyst plays a critical role in ensuring the security, compliance, and resilience of an organization's IT systems and infrastructure. This role involves identifying, assessing, and mitigating potential risks and vulnerabilities that could impact the confidentiality, integrity, and availability of digital assets. The IT Risk Management Analyst collaborates with various teams to implement effective risk management strategies and ensure that the organization maintains a robust and secure IT environment.

Risk Assessment

Essential Duties & Responsibilities

• Identify and assess potential IT risks, including cybersecurity threats, vulnerabilities, and compliance gaps.
• Conduct risk assessments to evaluate the potential impact and likelihood of identified risks.
• Analyze and interpret data related to IT security incidents, breaches, and vulnerabilities.

Risk Mitigation

• Develop and implement risk mitigation plans to address identified vulnerabilities and threats.
• Collaborate with IT and security teams to design and implement controls to reduce the organization's exposure to risks.
• Stay up-to-date with emerging security threats and industry best practices to enhance the effectiveness of risk mitigation strategies.

Compliance And Regulation

• Monitor and ensure compliance with relevant IT regulations, standards, and frameworks (e.g., GDPR, FERPA, FFIEC, HIPAA, NIST, ISO 27001).
• Assist in the development and maintenance of IT policies, procedures, and guidelines to ensure adherence to compliance requirements.

Security Incident Response

• Participate in incident response activities, providing expertise in analyzing and mitigating security incidents.
• Collaborate with incident response teams to investigate and remediate security breaches or vulnerabilities.

Risk Reporting And Communication

• Prepare and present reports on IT risks, vulnerabilities, and mitigation efforts to management and relevant stakeholders.
• Communicate complex technical concepts to non-technical audiences effectively.

Security Awareness And Training

• Assist in developing and delivering IT security awareness programs to educate employees about security best practices.
• Provide guidance and training to employees regarding risk management procedures and policies.

Continuous Improvement

• Identify areas for process improvements and recommend solutions to enhance the overall IT risk management program.
• Participate in the evaluation and implementation of new technologies and tools to enhance risk assessment and mitigation capabilities.

Job Skills

• Understanding of IT risk management principles, cybersecurity concepts, and industry standards.
• Proficiency in risk assessment methodologies, vulnerability assessment tools, and security frameworks.
• Excellent analytical and problem-solving skills, with the ability to assess complex situations and provide practical solutions.
• Effective communication skills to convey technical information clearly to both technical and non-technical stakeholders.
• Collaborative attitude with the ability to work across different teams and departments.
• Experience with security incident response and familiarity with security tools and technologies.

Work Experience

• 3 to 5 years in a similar role.

Education

• Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field required.

Certificates, Licenses And Registrations

• Preference: Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) are advantageous.

Other

• Must be able to travel occasionally should a business need arise. For most roles travel would not be common. Travel may involve plane, car or metro. In accordance with ADA policies, reasonable accommodation regarding travel limitations can be provided. Travel will be more common for roles such as Account Executives (25 - 50%), senior leaders (10 – 20%) or Capella Core Faculty (5 – 10%).
• Ability to work onsite in Corporate or Campus location (in a typical office environment) may be required based on role. If so, this would include being mobile within the office, including movement from floor-to-floor using elevators or stairs.
• If offsite or hybrid role, must have access to work in setting which enables meeting all requirements of the role (including privacy, reliable internet access, phone, ability to video conference, etc.) at a remote location.
• Faculty and Federal Work Study roles require access to work in setting which enables meeting all requirements of the role (including computer, privacy, reliable internet access, phone, ability to video conference, etc.) at a remote location.
• This role may require lifting, however reasonable accommodations will be provided in accordance with our ADA policies.
• Must be able to meet critical thinking and problem solving aspects aligned to job duties, as well as effectively communicating with co-workers.
• Must be able to work more than 40 hours per week when business needs warrant. Accommodations related to schedule may be considered.
• Able to access information using a computer.
• Other essential functions and marginal job functions are subject to modification.

SEI offers a comprehensive package of benefits to employees scheduled 30 hours or more per week. In addition to medical, dental, vision, life and disability plans, SEI employees may take advantage of well-being incentives, parental leave, paid time off, certain paid holidays, tax saving accounts (FSA, HSA), 401(k) retirement benefit, Employee Stock Purchase Plan, tuition assistance as well as entertainment and retail discounts. Non-exempt employees are eligible for overtime pay, if applicable.

Careers - Our Benefits, Strategic Education, Inc

SEI is an equal opportunity employer committed to fostering an inclusive and collaborative culture where individuals can grow their careers and contribute fully. We strive to attract talent with broad experiences, skills and perspectives. We welcome applications from all. While it is not typical for an individual to be hired at or near the top end of the pay range at SEI, we offer a competitive salary. The actual base pay offered to the successful candidate may vary depending on multiple factors including, but not limited to, job-related knowledge/skills, experience, business needs, geographical location, and internal pay equity. Our Talent Acquisition Team is ready to discuss your interest in joining SEI.

$75,800.00 - $113,700.00 - Salary

If you require reasonable accommodations to complete our application process, please contact our Human Resources Department at [e-mail]