Remote Information Security Analyst - GRC, Risk & Audits

University-of-California,-Riversid; Riverside (CA); Hybrid; USD 88,000 - 162,000; Full time

Job summary

University of California, Riverside is seeking an Information Security Analyst to implement the governance, risk management, compliance, and awareness program across the Information Security Office. You will conduct risk assessments, coordinate audits, and maintain policies to safeguard information and resources.

The role includes vulnerability assessments and security reviews to verify configurations meet standards, with responsibility for risk mitigation recommendations.

Qualifications

• Governance, risk management and compliance knowledge.
• Ability to design and implement security awareness programs.
• Experience in performing risk assessments and coordinating audits.
• Familiarity with vulnerability assessments and security reviews.

Responsibilities

• Implement the Information Security Office governance, risk management, compliance, and awareness program.
• Conduct risk assessments and coordinate audit engagements with relevant parties.
• Maintain and update information security policies, standards and procedures.
• Manage information security awareness training across the university.
• Conduct vulnerability scans and penetration tests to identify deviations from standards.
• Assess risk levels and recommend appropriate mitigation controls.

Skills

Information security

Risk management

Governance and compliance

Vulnerability assessment

Tools

Vulnerability scanners

Penetration testing

Job description

University of California, Riverside is seeking an Information Security Analyst to implement the governance, risk management, compliance, and awareness program across the Information Security Office. You will conduct risk assessments, coordinate audits, and maintain policies to safeguard information and resources.

The role includes vulnerability assessments and security reviews to verify configurations meet standards, with responsibility for risk mitigation recommendations.