Information Security Risk Analyst

Rutgers, The State University of New Jersey is hiring an Information Security Risk Analyst for the Office of Information Security. The role involves facilitating and evaluating internal and third-party information security risk assessments, providing remediation recommendations, maintaining a formal risk register, and collaborating with campus stakeholders to ensure risks are well documented and communicated.

• Facilitate and evaluate internal and third-party information security risk assessments.
• Provide risk remediation recommendations and promote awareness of supporting resources and technologies.
• Maintain a formal risk register aligned with business objectives to support security governance.
• Serve as a subject matter expert managing findings from information security assessments for vendors and applications.
• Assist in creating policies and procedures to reduce information security risks.
• Required knowledge of HIPAA, GLBA, PCI DSS regulations, and frameworks such as NIST CSF.
• Preferred certifications include CISSP or CRISC.
• Minimum qualification:
  
  Bachelor's degree in Computer Science, Information Systems, Management Information Systems or related field with at least five years of experience in Information Security programs.
• Salary range from $108,147 to $165,471 annually, depending on qualifications and experience.
• Work with the Office of Information Security within Rutgers University’s broader IT department.