Cybersecurity GRC Analyst

Manage cybersecurity governance, risk, and compliance activities across a university system. Maintain risk registers, POA&Ms, controls, policies, exceptions, and audit evidence; conduct vendor and solution risk reviews; coordinate remediation; develop metrics and executive reports; and lead security awareness, phishing simulation, training, and outreach programs. Apply cybersecurity frameworks and regulatory requirements while using AI and automation to improve workflows and reporting. The summary above was generated by AI

The University of Maine System is seeking a Cybersecurity Governance, Risk & Compliance (GRC) Analyst to join our Information Security team.

This position plays an important role in protecting the information, systems, and data that support Maine’s public universities. The GRC Analyst will help advance the University of Maine System’s cybersecurity governance framework, risk management processes, regulatory compliance efforts, and security awareness program.

Working across Information Technology, academic departments, administrative units, and with external partners, the Cybersecurity GRC Analyst will coordinate cybersecurity risk and compliance activities, support audit readiness, develop and maintain policies and controls, and help strengthen a culture of shared responsibility for cybersecurity throughout the University of Maine System.

This is an excellent opportunity for a cybersecurity professional who enjoys connecting technical security requirements with policy, risk management, compliance, communication, and organizational strategy.

This is a fully remote position, open to candidates who live and are authorized to work in the United States. Standard hours are Monday through Friday, 8:00 AM to 4:30 PM ET, with occasional evening or weekend work as needs arise.

What You’ll Do:

• Manage and support the institutional cybersecurity risk program, including maintaining the risk register, documenting risks, developing and tracking Plans of Action and Milestones (POA&Ms), and coordinating corrective actions with systems and data owners.
• Manage the cybersecurity risk review process for new solutions, services, and technology acquisitions, including intake and triage of risk review requests, conducting or coordinating security risk assessments (including third-party and vendor reviews using the Higher Education Community Vendor Assessment Toolkit (HECVAT), Standard and Organization Controls (SOC) 2 reports, and similar assurance documentation), documenting findings and recommendations, and routing risk acceptance and approval decisions to the appropriate authority.
• Map and maintain cybersecurity controls against applicable frameworks and regulatory requirements, including National Institute of Standards and Technology Special Publication (NIST SP 800-171), Center for Internet Security (CIS) Controls, Family Educational Rights and Privacy Act (FERPA), Health Insurance Portability and Accountability Act (HIPAA), Criminal Justice Information Services (CJIS), Payment Card Industry (PCI), the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule, and other relevant standards.
• Develop, review, and maintain cybersecurity policies, standards, procedures, and guidelines.
• Monitor compliance with cybersecurity policies and regulatory obligations and coordinate audit readiness activities, including evidence collection and documentation.
• Serve as a liaison with internal and external auditors and regulatory entities.
• Manage cybersecurity exception and risk acceptance processes, including documentation, approvals, and periodic reviews.
• Facilitate periodic risk reviews with risk and system owners, including re-review of accepted risks and expiring exceptions, and escalate overdue items for decision.
• Coordinate remediation of findings identified through audits, risk assessments, and compliance reviews.
• Develop cybersecurity metrics, dashboards, and reports that support operational monitoring, executive decision-making, and governance.
• Lead the development and administration of cybersecurity awareness and training initiatives, including phishing simulations, enterprise-wide campaigns, onboarding and annual education, and role-based training.
• Support cybersecurity engagement and outreach efforts, including a cybersecurity champions network and other initiatives that promote shared responsibility for security.
• Prepare reports, briefings, and presentations for executive leadership and governance bodies regarding cybersecurity risks, compliance posture, and program effectiveness.
• Leverage artificial intelligence and automation to improve analysis, reporting, workflows, and cybersecurity program operations.

What We Are Looking For: The successful candidate will bring knowledge of cybersecurity governance, risk management, and compliance principles along with the ability to translate complex security requirements into practical policies, processes, recommendations, and communications., Materials must be submitted via “Apply Now” below. You will need to complete an application and upload the following:

• A cover letter that describes your experience, interests, and suitability for the position.
• A resume or curriculum vitae.

Important items to know about the recruitment process:

Review of applications will begin immediately. The position will remain open until filled. For full consideration, applications must be submitted by September 13, 2026.

• Incomplete application materials cannot be considered.
• Candidates selected to proceed to the final stages of the search process will be requested to provide three (3) names and contact information for references.
• The successful applicant is subject to appropriate background screenings., Lead customer implementations of SOPHiA GENETICS genomic analysis solutions, from planning and sample selection through configuration, training, adoption, and issue resolution. Manage MaxCare Program schedules, timelines, sampling strategies, Statements of Work, technical setup, and cross-functional delivery. Translate laboratory, bioinformatics, data, and clinical regulatory requirements into practical solutions while building trusted customer relationships. The field-based US role includes approximately 30% travel. Top Skills: BioinformaticsCustom ReportingFederated Sso AuthenticationLibrary PreparationNext-Generation SequencingSophia Ddm Platform PNC Bank

Software Engineer

2 Hours Ago Remote or Hybrid USA 75K-150K Annually Junior 75K-150K Annually Junior Machine Learning * Payments * Security * Software * Financial Services Develops, tests, deploys, maintains, and debugs software across the full project lifecycle. Translates business requirements into technical designs, supports production systems, documents solutions, estimates development tasks, collaborates with teammates, and mentors newer developers. The role requires application architecture, SDLC, testing, troubleshooting, and maintenance experience using Java, .NET, and/or Delphi, with Delphi preferred. Top Skills: .NetDelphiJava PNC Bank

Senior Software Engineer

2 Hours Ago Remote or Hybrid USA Senior level Senior level Machine Learning * Payments * Security * Software * Financial Services Designs, develops, tests, deploys, maintains, and debugs software solutions. Leads complex technical initiatives, Java microservices and API integration, OpenShift deployments, server and database administration, release management, production support, vulnerability remediation, incident resolution, and vendor coordination. Supports remote deposit platforms while managing application resiliency, security compliance, documentation, and stakeholder communication. Top Skills: AgileAPIsCandescent Remote Deposit/CaptureCloud-Native ArchitecturesConnect:DirectContainerizationDevOpsJavaLinuxMicroservicesMicrosoft Sql ServerOpenshift Container PlatformPowershellPythonSdlcShell ScriptingWindows Server

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

• Bachelor’s degree in Cybersecurity, Information Systems, Information Technology, Risk Management, or a related field, or an equivalent combination of education and experience.
• Five years of professional experience in cybersecurity, IT risk management, compliance, or information security program support.
• Experience with audit preparation and evidence documentation practices.
• Knowledge of cybersecurity frameworks and standards, including NIST, CIS Controls, ISO standards, and applicable regulatory requirements.
• Knowledge of cybersecurity risk assessment methodologies and security control frameworks.
• Experience maintaining risk registers, POA&Ms, or corrective action tracking, and supporting risk acceptance or exception processes.
• Ability to analyze cybersecurity risks and develop practical mitigation recommendations.
• Ability to develop policies, procedures, and governance documentation.
• Ability to develop reports, dashboards, and metrics for leadership and governance audiences.
• Strong written communication skills, including policy documentation and executive-level reporting.
• Ability to collaborate effectively with both technical and nontechnical stakeholders.
• Demonstrated use of AI-assisted tools or automation to improve security workflows, processes, or reporting.
• Familiarity with the responsible use of artificial intelligence and automation in professional environments, including appropriate data protection considerations.

Preferred Qualifications

• Relevant governance, risk, compliance, audit, or privacy certifications, such as:
• CISA - Certified Information Systems Auditor
• CRISC - Certified Risk and Information Systems Control
• CGRC - Certified in Governance, Risk, and Compliance
• CISM - Certified Information Security Manager
• CIPP - Certified Information Privacy Professional
• CIPM - Certified Information Privacy Manager
• Certification or professional development related to artificial intelligence, automation, or emerging technologies.
• Experience working in higher education, the public sector, a multi-campus organization, or another complex enterprise IT environment.
• Experience supporting cybersecurity governance, risk management, and compliance programs.
• Experience with GRC platforms such as ServiceNow GRC, Isora GRC, OneTrust, or Archer, and familiarity with HECVAT for vendor security reviews.
• Experience coordinating internal and external cybersecurity awareness and training programs.
• Experience designing or implementing automation solutions that improve workflows, reporting, or operational efficiency.

What We Offer: Our comprehensive benefits package can be worth up to 50% of your annual salary and is designed to support your health, financial well-being, professional growth, and work-life balance. Benefits include:

• Competitive salary: $65,000-$75,000 commensurate with education and experience. This is a fixed range set within a predefined wage band; therefore, we are unable to negotiate a starting salary above the posted range.
• Comprehensive health benefits, including medical, dental, vision, flexible spending accounts (FSA), and Health Savings Account (HSA) options
• Employer-paid benefits, including basic life insurance and long-term disability coverage, with additional voluntary coverage options available
• Retirement plan through TIAA with 10% employer contribution and opportunities for additional tax-deferred retirement savings
• Generous paid time off, including vacation and sick leave, plus 13 paid holidays each year
• Tuition waiver program for employees, including graduate courses and Maine Law, plus substantial tuition discounts for eligible spouses and dependent children
• Employee Assistance Program (EAP) and wellness programs supporting your health and well-being
• Professional development and opportunities to grow your career within Maine’s public university system
• Additional voluntary benefits, including pet insurance, home and auto insurance discounts, and supplemental disability and life insurance options

Why Join the University of Maine System?

At the University of Maine System, technology plays a vital role in advancing education, research, and public service. As part of Information Security team, you’ll have the opportunity to work on meaningful, system-wide initiatives that impact thousands of students, faculty, and staff across Maine.

The University of Maine System (UMS), established in 1968, consists of seven universities and the University of Maine School of Law, spread across various locations in Maine. UMS provides system-wide services and governance from these locations, leveraging the distinct strengths and collaborations among its institutions to advance strategic priorities for UMS and the state of Maine. Choosing UMS means opting for a high quality of life supported by excellent benefits such as tuition waivers, robust retirement contributions, and comprehensive insurance coverage including medical, dental, vision, life, and disability. Maine’s diverse landscapes, from accessible wilderness and rugged coastline to urban centers and rural communities, offer numerous cultural activities, strong public schools, safe neighborhoods, and high-quality healthcare. Discover more about Maine’s exemplary lifestyle on the Maine Office of Tourism website.