Senior Cybersecurity GRC & DR/BC Risk Lead

University System of New Hampshire; New Hampshire; On-site; USD 90,000 - 120,000; Full time

Job summary

The University System of New Hampshire is seeking a Team Lead for Cybersecurity Governance, Risk, and Compliance (GRC). You will coordinate risk management frameworks such as NIST CSF to assess the security posture across USNH services and ensure regulatory alignment with standards like CMMC, FERPA, GLBA, HIPAA, and PCI DSS.

You will prepare quantitative risk and compliance metrics for the CISO and CIO, oversee policy and standards drafting, assess third-party risks, and support cybersecurity

Qualifications

• Bachelor's degree and four years of experience in information technology/cybersecurity field or equivalent combination of education and experience.
• Experienced in or knowledgeable about a broad range of cybersecurity subject areas.
• Specific knowledge about IT contingency planning (disaster recovery/business continuity, and incident response).
• Demonstrated experience working in managed project teams.
• Strong organizational skills and attention to detail.
• Effective oral and written communication skills with demonstrated ability to compose and present material to communicate difficult concepts.
• Able to develop and present information, ideas and instructions with minimal oversight.

Responsibilities

• Cybersecurity Policies & Standards development and publication aligned with NIST CSF and 800-53/800-171.
• Coordinate policy review sessions with stakeholders and maintain an annual policy review cycle.
• Draft and update policies and standards to match evolving threats and business needs.
• Oversee records of policy approvals and exceptions.

Skills

Broad cybersecurity knowledge

Project coordination

Written communication

Oral communication

Information technology

Disaster recovery planning

Education

Bachelor's degree

Job description

The University System of New Hampshire is seeking a Team Lead for Cybersecurity Governance, Risk, and Compliance (GRC). You will coordinate risk management frameworks such as NIST CSF to assess the security posture across USNH services and ensure regulatory alignment with standards like CMMC, FERPA, GLBA, HIPAA, and PCI DSS.

You will prepare quantitative risk and compliance metrics for the CISO and CIO, oversee policy and standards drafting, assess third-party risks, and support cybersecurity