Security Risk Analyst - Governance & Vendor Risk (Hybrid)

Rutgers University; New Brunswick, Northern (NJ, KY); Hybrid; USD 108,000 - 165,000; Full time

Benefits offered by this job

Medical, Prescription Drug & Dental

Paid vacation & holidays

Competitive retirement benefits

Educational benefits

Life insurance

Employee discount programs

Job summary

Rutgers University is seeking an Information Security Risk Analyst to join the Office of Information Security (OIT). The role reports to the Information Security Risk Manager and focuses on risk assessments for internal and third‑party systems, remediation guidance, and governance alignment.

The candidate should have a bachelor’s degree in a related field and at least five years of information security experience, with strong communication skills and knowledge of major regulatory frameworks.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, MIS or related field and 5+ years of information security experience.
• Knowledge of HIPAA, GLBA and PCI DSS and related frameworks.
• Excellent interpersonal and communication skills; ability to influence across stakeholder groups.
• Ability to document, communicate and present information security concepts to diverse audiences.

Responsibilities

• Facilitate and evaluate internal and third‑party information security risk assessments.
• Provide risk remediation recommendations to mitigate identified control gaps.
• Collaborate with campus stakeholders to ensure risks are documented and communicated.
• Maintain a formal risk register aligning findings with business objectives and governance.
• Serve as SME for end‑to‑end management of findings related to security assessments for vendors and applications.
• Assist in creating policies and procedures to reduce risk and perform other assigned tasks.

Skills

HIPAA/GLBA/PCI DSS knowledge

Interpersonal communication

Collaborating across disciplines

Documentation & reporting

Education

Bachelor’s degree in Computer Science / Information Systems or related field

Tools

GRC platforms

Job description

Rutgers University is seeking an Information Security Risk Analyst to join the Office of Information Security (OIT). The role reports to the Information Security Risk Manager and focuses on risk assessments for internal and third‑party systems, remediation guidance, and governance alignment.

The candidate should have a bachelor’s degree in a related field and at least five years of information security experience, with strong communication skills and knowledge of major regulatory frameworks.