Cybersecurity Analyst 1 - GRC

Arizona State University • Tempe, AZ

4d • Hybrid

About The Position

ASU Enterprise Technology is seeking a Cybersecurity Analyst 1 - GRC to join the Cybersecurity Governance, Risk, Compliance, and Vulnerability Management team. In this entry-level role, you will support vulnerability management operations, governance and risk assessments, vendor IT risk reviews, cybersecurity policy and standards development, and AI security governance activities across the university. This is an opportunity to build foundational cybersecurity governance and compliance experience within a large, complex public enterprise. As with all members of the Enterprise Technology team, this role carries core responsibilities, including fostering a sense of belonging and cultivating a culture that is relational, visionary, and empowering. With a strong emphasis on authenticity and compassion, this position is dedicated to embodying and advancing our culture.

Requirements

• Associate's degree and one (1) year of experience appropriate to the area of assignment/field; OR, Any equivalent combination of experience and/or training from which comparable knowledge, skills and abilities have been achieved.
• Applicants must be eligible to work in the United States.

Nice To Haves

• Commitment to leading by example through effective communication, active participation, and advocacy for the institution’s sustainability programs.
• Coursework, certificate, or entry-level certification in cybersecurity, governance, risk, or compliance (e.g., CompTIA Security+, CGRC, CDPSE, or similar).
• Exposure to vulnerability assessment tools (e.g., Tenable, Qualys, Rapid7).
• Familiarity with regulatory or framework requirements applicable to higher education (e.g., FERPA, HIPAA, PCI DSS, NIST).
• Experience with Microsoft Excel or similar tools for tracking and reporting.
• Strong analytical and problem-solving skills.
• Demonstrated ability to model empathy, compassion, and emotional intelligence.
• Capacity to inspire and drive meaningful change in individual, institutional, and corporate behaviors to support a more sustainable environment.

Responsibilities

• Support vulnerability management operations, including running and reviewing vulnerability scans, tracking remediation status, and coordinating with system owners on remediation timelines.
• Assist with governance, risk, and compliance activities, including control assessments, policy and standards reviews, and mapping of security requirements to applicable frameworks and regulations (e.g., NIST RMF, NIST CSF 2.0, ISO 27001, HIPAA, PCI DSS, CMMC).
• Support vendor IT risk assessments by reviewing vendor security documentation and assisting with risk scoring.
• Assist with the development, maintenance, and communication of cybersecurity policies and standards.
• Support AI security and governance reviews, including intake and documentation for AI risk assessments.
• Prepare reports and documentation to communicate risk and compliance status to stakeholders.
• Leverage AI in routine tasks and contribute ideas for using AI to improve the unit’s efficiency and overall performance.
• Collaborate across teams and actively participate in ET/ASU events and programs.

Benefits

• Opportunities include hybrid work where staff are in person three days per week.
• Our professional development is built in! ET encourages staff to seek additional certificates and degrees via ASU’s top ranked programs with major tuition breaks.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree