Information Security Control Assurance Analyst

Southern New Hampshire University is a team of innovators. World changers. Individuals who believe in progress with purpose. Since 1932, our people-centered strategy has defined us — and helped us grow a team that now serves over 180,000 learners worldwide. Our mission to transform lives is made possible by talented people who bring diverse industry experience, backgrounds and skills to the university.

And today, we're ready to expand our reach. All we need is you. Make an impact — from near or far At SNHU, you'll have the option to work remotely in the following states:
Alabama, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, New Hampshire, New Mexico, North Carolina, North Dakota, Ohio, Oklahoma, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, West Virginia, Wisconsin and Wyoming. We ask that our remote employees have access to a reliable internet connection and a dedicated, properly equipped workspace that is free of distractions.

Employees must reside in, and work from, one of the above approved states.

The Information Security Control Assurance Analyst plays a critical role in ensuring the University's adherence to legal, regulatory, and contractual information security and data protection requirements. This position leads and supports security assessment and authorization activities, including the development and maintenance of system security plans, evaluation of technical, administrative, and physical security controls, and management of remediation efforts through Plans of Action and Milestones (POA&Ms).

The Analyst serves as a key contributor to institutional risk management by identifying compliance gaps, assessing risk associated with control deficiencies, and providing clear, actionable reporting to leadership. This role partners closely with IT, Legal, Privacy, and business stakeholders to coordinate internal and external audits, respond to regulatory changes, and translate complex security and compliance requirements into practical, well documented policies, standards, and procedures that support the University's mission and operational needs.

You will work 100% remotely from any of our approved states. #LI-Remote

• Lead and perform information security risk and compliance assessments to evaluate the effectiveness of technical, administrative, and physical security controls across University systems and services.
• Develop, maintain, and review System Security Plans (SSPs), risk assessments, and supporting documentation in alignment with applicable security frameworks and regulatory requirements.
• Identify control gaps and security deficiencies, assess associated risk, and document findings with clear, actionable recommendations.
• Manage and oversee Plans of Action and Milestones (POA&Ms), including tracking remediation activities, validating corrective actions, and reporting progress to stakeholders.
• Coordinate and support internal and external audits and assessments, including evidence collection, validation, and response management.
• Monitor and interpret changes in federal and state information security and data privacy laws, regulations, and contractual requirements, and assess organizational impact.
• Develop, update, and maintain information security policies, standards, procedures, and governance documentation to ensure ongoing compliance and operational effectiveness.
• Partner closely with ISMO, Privacy, Legal, and business stakeholders to translate regulatory and security requirements into practical, implementable controls and processes.
• Prepare and deliver compliance, risk, and audit…