Information Assurance; IA Analyst

About EAB

At EAB , our mission is to make education smarter and our communities stronger. We work with more than 2,800 institutions to drive transformative change through data-driven insights and best‑in‑class capabilities. From kindergarten to college to career, EAB partners with leaders and practitioners to accelerate progress and drive results across enrollment, student success, institutional strategy, data analytics, and advancement. We work with each partner differently, tailoring our portfolio of research, technology, and marketing and enrollment solutions to meet the unique needs of every leadership team, as well as the students and employees they serve.

At EAB, we serve not only our partner institutions but each other—that's why we are always working to make sure our employees love their jobs and are invested in their communities. See how we've been recognized for this dedication to our employees by checking out our recent awards . For more information, visit our Careers page.

The Information Assurance (IA) Analyst will be responsible for assessing the risks associated with EAB technology applications and platforms and/or third‑party service providers that support those platforms. The IA Analyst will also support and contribute to business continuity management and planning activities, support and conduct information security audits, assess risks associated with third‑party service providers, develop and deliver security awareness training content, and participate in the measurement and reporting of key risk indicators and metrics across the organization.

This role is designed for an early‑career professional looking to build a foundation in cybersecurity governance, risk management, compliance, and information assurance.

This individual will be a valued member of the EAB Information Security team and will work closely with IT, Legal, Commercial, Product, and various other business stakeholders. We work to keep our partners and EAB colleagues safe from cyber‑attacks and prevent the theft of data and intellectual property. We think big and strategic but aren’t afraid to get into the weeds.

Relationship building and stakeholder management across teams are integral to our continued success. We believe that diversity makes for better, more creative solutions to tough problems. We’re easy to work with and eager to help. Most importantly, we work every day to contribute to the mission of making education smarter and our communities stronger. If this sounds like you, we’d love to talk to you.

This position is located in Washington, D.C. or Richmond, VA.

• Participate in the day‑to‑day execution of Information Technology (IT) audit engagements, including supporting audit scoping activities and annual audit planning
• Perform IT risk assessments of internal initiatives and critical third‑party vendor relationships against criteria from information security frameworks and industry regulations, such as ISO/IEC 27001, NIST SP 800‑53, SSAE 18 SOC II Type I and Type II, DoD compliance frameworks (e.g., NIST 800‑171, CMMC, FedRAMP), NIST CSF, FERPA, and privacy regulations like GDPR and CCPA
• Review vendor security documentation, questionnaires, and attestations; assess risk impact and recommend risk treatment options
• Support RFPs/security questionnaires (HECVATs, CAIQ, custom questionnaires) from clients with clear SLAs and maintain upkeep of Security & Compliance Trust portals
• Evaluate the design and effectiveness of technology controls throughout the business cycle
• Support assessments of emerging technologies, including AI‑enabled systems, to identify security, privacy, and compliance risks
• Assist in the development and delivery of security awareness training content to new hires and existing employees including security newsletters, Lunch & Learns, online training modules, etc.
• Identify control gaps and risks, recommend mitigation strategies, and track remediation activities through closure
• Communicate IT audit findings and mitigation strategies to senior management, technology leaders, and the CISO
• Assist in the development of risk…