Senior IT Governance, Risk, and Compliance; GRC) Analyst

Senior IT Governance, Risk, and Compliance (GRC) Analyst

Job

Location:

Kennesaw, Georgia

Full/Part Time:
Full Time

Regular/Temporary:
Regular

Are you ready to transform lives through academic excellence, innovative research, strong community partnerships and economic opportunity? Kennesaw State University isone of the 50 largest public institutions in the country. With growing enrollment and global reach, we continue to expand our institutional influence and prominence beyond the state of Georgia.

We offer more than 190 undergraduate, graduate, and doctoral degrees to empower over 50,000 students to become thought leaders,lifelong learners, and informed global citizens. Our entrepreneurial spirit, high-impact research, and Division Iathletics draw students from throughout the region and from morethan 100 countries across the globe. Our university's vibrant culture, career opportunities,rich benefits, and valuesof respect, integrity, collaboration, inclusivity, and accountability make us an employer of choice.

We are part ofthe

University System of Georgia.

We are searching for talented people to join Kennesaw State University in our vision.

Come Take Flight at KSU!

(Primary Location for Job Responsibilities) Our Kennesaw campus is located at 1000

Chastain Road NW, Kennesaw, GA 30144.

Our Marietta campus is located at 1100 South Marietta Parkway, Marietta, GA 30060.

The position leads enterprise cybersecurity governance, risk management, compliance, and third-party risk activities while supporting alignment with institutional, state, and federal requirements. This position serves as a senior subject matter expert, providing strategic guidance, leading complex assessments,and promoting risk-informed decision-making across the university.

• Leads enterprise IT and cybersecurity risk assessments usingNIST, CIS, and institutional frameworks, evaluating compensatingcontrols and contextual risk to support informed decision-making.
• Maintains and enhances the enterprise IT risk register, ensuring accurate risk documentation, ownership assignment, remediation tracking, and risk acceptance processes.
• Leads third-party vendor risk assessments, analyzing SOCreports, HECVATs, security questionnaires, and supporting documentation to evaluate organizational risk.
• Coordinates audit readiness activities, evidence collection,stakeholder engagement, response tracking, and remediation efforts related to cybersecurity and regulatory audits.
• Assesses and validates technical, administrative, and operational controls against GLBA, HIPAA, FERPA, PCI-DSS, NIST, and related compliance requirements.
• Supports the University's data privacy program, including
  
  Records of Processing Activities (RoPA), data privacy consultations and assessments, data privacy requests, privacy risk identification and mitigation, and the development and implementation of data privacy awareness and training initiatives.
• Develops, reviews, and maintains cybersecurity policies,standards, procedures, and governance documentation to support compliance and operational maturity.
• Collaborates with internal stakeholders to evaluate, validate,and reassess IT controls, identify control gaps and risks, and support the development and implementation of appropriateremediation strategies.
• Collaborates with the Office of Research, faculty, and other key stakeholders to support the governance, compliance, risk management, and security and privacy requirements associated withsponsored research, controlled information, and regulated research environments.
• Partners with business, academic, and technology stakeholders to identify risks, recommend mitigation strategies, and support implementation of corrective actions.
• Develops metrics, dashboards, and executive reports that communicate cybersecurity risk, compliance status, trends, and program effectiveness to leadership.

Educational Requirements

• Bachelor's degree from an accredited institution of higher education or an equivalent combination of relevant education and/or experience.

Required Experience

• Five (5) years of professional experience supporting governance,risk, compliance, audit, legal, cybersecurity, or related functions and disciplines.

Additional Preferred Qualifications

• Relevant certifications such as CISSP, CISA, CRISC, CGRC, CISM, Security+, or ITIL Foundation

Preferred Educational Qualifications

• An advanced degree from an accredited institution of higher education in a related field such as…