Senior GRC Analyst: Risk, Compliance & Governance

Kennesaw State University; Kennesaw (GA); On-site; USD 90,000 - 130,000; Full time

Job summary

Kennesaw State University is seeking a Senior IT Governance, Risk, and Compliance (GRC) Analyst to lead enterprise cybersecurity governance, risk management, compliance, and third-party risk activities. The role provides strategic guidance, conducts complex assessments, and promotes risk-informed decision-making across the university.

The ideal candidate has 5+ years of GRC-related experience, relevant certifications, and strong abilities to communicate with technical and non-technical

Qualifications

• Bachelor's degree or equivalent in IT, cybersecurity, or related field.
• Five (5) years of governance, risk, compliance, audit, or cybersecurity experience.
• Relevant certifications such as CISSP, CISA, CRISC, CISM, Security+ or ITIL.
• Experience with GRC platforms and regulatory requirements (GLBA, HIPAA, FERPA, PCI-DSS, NIST).

Responsibilities

• Lead IT and cybersecurity risk assessments using NIST, CIS, and institutional frameworks.
• Maintain enterprise IT risk register with ownership, remediation tracking.
• Lead third-party vendor risk assessments and review SOC reports and questionnaires.
• Coordinate audit readiness activities and evidence collection.
• Assess controls against GLBA, HIPAA, FERPA, PCI-DSS, NIST and related standards.
• Develop metrics and executive dashboards communicating risk and compliance status.

Skills

Regulatory compliance

GRC frameworks

Risk assessment

Vendor risk management

Audit support

Executive reporting

Communication skills

Education

Bachelor's degree in IT/Cybersecurity

Tools

ServiceNow GRC

RSA Archer

OneTrust

Apptega

Job description

Kennesaw State University is seeking a Senior IT Governance, Risk, and Compliance (GRC) Analyst to lead enterprise cybersecurity governance, risk management, compliance, and third-party risk activities. The role provides strategic guidance, conducts complex assessments, and promotes risk-informed decision-making across the university.

The ideal candidate has 5+ years of GRC-related experience, relevant certifications, and strong abilities to communicate with technical and non-technical