InfoSecurity GRC Engineer I

SUMMARY: The InfoSecurity GRC (Governance, Risk, Compliance) Engineer I ensures the cybersecurity and data privacy posture of the District by performing security and privacy assessments on requested technology, including software, hardware, Chrome extensions, and administrative IT-based systems. This role reviews technical requests to ensure compliance with FERPA, COPPA, and CIPA. They are responsible for conducting vulnerability scans during the technology assessment process, managing governance documentation, and supporting District data privacy.

ESSENTIAL DUTIES AND RESPONSIBILITIES: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

JOB TASK DESCRIPTIONS:

1. Technology Risk Assessment: Evaluate technology requests (software, hardware, and Chrome extensions) for security risks and privacy compliance.

2. Technical Auditing & Scanning: Execute technical vulnerability scans and privacy audits against requested systems to identify risks before District implementation.

3. Remediation Management & Vendor Coordination: Manage technology risk remediation efforts, working with vendors and IT teams to ensure requested systems meet District security standards.

4. User Awareness Implementation: Assist or lead in the development and implementation of awareness programs to educate staff and students on data security, privacy, and District policies.

5. Reporting & Governance Documentation: Generate technical reports on system vulnerabilities, threat landscapes, and technology risk profiles to maintain transparency in governance operations.

6. Daily Alarm Monitoring & Alert Triage: Monitor daily security alarms, review system dashboards, and triage incoming automated alerts to identify potential risks or incidents for immediate resolution or escalation.

7. Ticket Management & Support Resolution: Manage, resolve, or escalate routine technical support tickets related to information governance, risk assessments, privacy inquiries, and basic access controls.

8. Technical Auditing & Compliance: Conduct technical compliance audits of District systems and monitor for security policy or privacy violations.

9. Perform other duties as assigned.

Associates degree in Computer Science, Information Systems, or a related field (Two years of similar experience may substitute this education requirement).

• Zero to two years of experience in IT operations, auditing, or support.

LICENSES, REGISTRATIONS or CERTIFICATIONS:

• Criminal background check required for hire.

• Current certifications relevant to cybersecurity such as Security+, or other relevant certifications preferred.

Adams 12 Five Star Schools is committed to providing an environment that promotes a healthy employee population able to serve our students at the highest level. We offer a comprehensive benefits package including medical, dental, vision and life insurance as well as other programs for benefit eligible employees. The employee assistance program, voluntary life insurance through PERA, and 401(k), 403(b) & 457(b) plans are available to all employees regardless of hours worked and are available immediately (upon hire date).

To learn more about our benefits, including paid time off, please see our Benefits Overview. (https://www.adams12.org/our-district/human-resources/benefits-overview)