Information Security Risk Analyst

Rutgers University is hiring an Information Security Risk Analyst for the Office of Information Security (OIT). This role requires facilitating and evaluating internal and third-party information security risk assessments, providing risk remediation recommendations, maintaining a formal risk register, and collaborating with stakeholders across campus to ensure risks are well documented and communicated.

• Conduct and evaluate internal and third-party information security risk assessments.
• Recommend risk remediation to mitigate control gaps and raise awareness of security resources.
• Maintain a formal risk register supporting security governance aligned with business goals.
• Serve as a subject matter expert for managing findings from security assessments of vendors and applications.
• Assist in creating policies and procedures to reduce information security risk.
• Required knowledge of HIPAA, GLBA, PCI DSS, and frameworks like NIST CSF.
• Minimum of a bachelor's degree in Computer Science, Information Systems, or related field with at least five years of relevant experience.
• Preferred certifications include CISSP or CRISC; experience with GRC or Vendor Risk Management platforms.
• Salary range from $108,147 to $165,471 depending on qualifications and experience.
• Works across Rutgers University campuses engaging with technical and non-technical stakeholders including students, faculty, and staff.