IT Security Analyst

A leading university is seeking an IT Security Analyst to join the Cybersecurity Governance, Risk, and Compliance (GRC) team. This role will support the university’s research community by helping strengthen cybersecurity controls, preparing for security audits, and advancing compliance initiatives focused on NIST 800-171 and Cybersecurity Maturity Model Certification (CMMC) requirements. The ideal candidate brings experience in information security, risk management, and compliance, along with strong analytical skills and the ability to collaborate across technical and non-technical teams to promote a culture of security awareness and regulatory readiness., * Support the execution of the university’s NIST readiness initiatives by assisting with security assessments, identifying compliance gaps, implementing security controls aligned with NIST 800-171 standards, and contributing to preparations for CMMC and other security audits and regulatory requirements.

• Collaborate with the university’s IT groups, Research Computing, and cross-functional partners, including Finance, Human Resources, and Legal, to integrate cybersecurity practices into broader organizational risk management efforts while supporting the review and enhancement of security policies, procedures, and best practices.
• Develop and deliver security awareness and training programs aligned with NIST frameworks to promote security knowledge, responsibility, and compliance throughout the organization, including support for learning management activities where applicable.
• Monitor and evaluate the effectiveness of security controls and risk management practices through participation in risk assessments, vulnerability assessments, audit support activities, documentation management, and operational reporting.
• Stay current on emerging cybersecurity threats, industry trends, evolving regulations, and security frameworks while supporting additional initiatives that strengthen the university’s overall information security posture.

Do you have experience in Vulnerability management?, Do you have a Bachelor’s degree?, * 3 years of experience in information security, cybersecurity governance, risk management, compliance, or related fields.

• Bachelor’s degree or equivalent combination of education and relevant experience.
• Experience supporting information security, risk management, compliance initiatives, or cybersecurity programs.
• Knowledge of cybersecurity frameworks and regulations, particularly NIST standards and HIPAA requirements.
• Experience participating in security audits, risk assessments, vulnerability assessments, or compliance reviews.
• Understanding of security technologies, including encryption, firewalls, intrusion detection systems, SIEM platforms, and related security tools.
• Experience collaborating within cybersecurity, information security, assurance, or related technical teams.
• Knowledge of ISO 27001 and PCI DSS frameworks is preferred.
• Professional cybersecurity certifications, such as CompTIA Security+ or other relevant certifications, are preferred.
• Experience configuring or administering Learning Management Systems (LMS), including course creation and management, is preferred.
• Experience working within higher education or other highly regulated industries is preferred.

4.84.8 out of 5 stars Redwood City, CA 94065 Hybrid work $55 - $75 an hour - Temporary, Full-time, Contract, Pulled from the full job description

• Vision insurance
• Dental insurance, * Hourly pay: $55-$75/hr
• Worksite: Leading university (Redwood City, CA 94063 - Hybrid)
• W2 Employment, Group Medical, Dental, Vision, Life, Retirement Savings Program, PSL
• 40 hours/week, 18 Month Assignment, * Expected to travel to campus no more than a few days each quarter. Travel expenses will be covered if located outside the greater Bay Area.
• 9:00 am to 5:00 pm PST.
• For remote modality, the university’s team operates on Pacific Time, and thus the salary is adjusted according to the regions of the country.