Associate Security Analyst

• Support NIST 800-171 readiness initiatives by assisting with security assessments, implementing security controls, identifying compliance gaps, recommending corrective actions, and preparing the organization for security audits and Cybersecurity Maturity Model Certification (CMMC) requirements.
• Develop, deliver, and maintain security awareness and training programs aligned with NIST standards while supporting the review, enhancement, and documentation of security policies, procedures, operational reports, and compliance activities.
• Monitor security controls, evaluate risk management practices, perform risk and vulnerability assessments, maintain compliance documentation, and support continuous improvements to the organization’s cybersecurity posture.
• Collaborate with Research Computing, IT, Finance, Human Resources, Legal, and other cross-functional teams to integrate information security into enterprise risk management, support regulatory compliance efforts, and provide security guidance to the research community.
• Stay current on emerging cybersecurity threats, technologies, regulations, and industry best practices while communicating technical information to both technical and non-technical audiences and supporting additional information security initiatives as assigned.

• 3+ years of experience in information security, cybersecurity, risk management, compliance, or a related field.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, or equivalent professional experience.
• Knowledge of information security, risk management, compliance frameworks, and industry standards, including NIST and HIPAA.
• Experience supporting security audits, risk assessments, vulnerability assessments, security controls, and compliance initiatives.
• Knowledge of security technologies including encryption, firewalls, intrusion detection systems, SIEM platforms, and related cybersecurity tools.
• Strong analytical, problem-solving, organizational, written, and verbal communication skills with the ability to explain technical concepts to diverse audiences.
• Ability to stay current with evolving cybersecurity threats, technologies, and regulatory requirements while working collaboratively across cross-functional teams.
• Knowledge of ISO 27001 and PCI DSS is preferred.
• Security+ or other professional cybersecurity certifications are preferred.
• Experience administering or managing Learning Management Systems (LMS) is preferred.
• Experience working in higher education or another highly regulated industry is preferred.

• Hourly pay: $55-$75/hr
• Worksite: Leading university (Redwood City 94063 - Hybrid)
• W2 Employment, Group Medical, Dental, Vision, Life, Retirement Savings Program, PSL
• 40 hours/week, 11 Month Assignment, * Monday to Friday, 9:00 am to 5:00 pm PST.
• Open to Remote modality operating on Pacific Time. Salary would be adjusted. May also be expected to come to campus no more than a few days each quarter. Travel expenses would be paid if the candidate is outside the greater Bay Area.

A leading university is seeking an 1504938 Associate Security Analyst to support cybersecurity governance, risk, and compliance initiatives, partnering with IT, research, and business teams to support security assessments, regulatory compliance, NIST 800-171 and CMMC readiness, security awareness programs, and risk management efforts that protect the university’s research, education, and healthcare environments.