IT Risk Management Analyst

Strayer Education, Inc.

3d•$75,800 - $113,700•Hybrid

About The Position

The IT Risk Management Analyst plays a critical role in ensuring the security, compliance, and resilience of an organization's IT systems and infrastructure. This role involves identifying, assessing, and mitigating potential risks and vulnerabilities that could impact the confidentiality, integrity, and availability of digital assets. The IT Risk Management Analyst collaborates with various teams to implement effective risk management strategies and ensure that the organization maintains a robust and secure IT environment.

Requirements

Understanding of IT risk management principles, cybersecurity concepts, and industry standards.
Proficiency in risk assessment methodologies, vulnerability assessment tools, and security frameworks.
Excellent analytical and problem-solving skills, with the ability to assess complex situations and provide practical solutions.
Effective communication skills to convey technical information clearly to both technical and non-technical stakeholders.
Collaborative attitude with the ability to work across different teams and departments.
Experience with security incident response and familiarity with security tools and technologies.
Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field required.
Ability to work onsite in Corporate or Campus location (in a typical office environment) may be required based on role. If so, this would include being mobile within the office, including movement from floor-to-floor using elevators or stairs.
If offsite or hybrid role, must have access to work in setting which enables meeting all requirements of the role (including privacy, reliable internet access, phone, ability to video conference, etc.) at a remote location.
Faculty and Federal Work Study roles require access to work in setting which enables meeting all requirements of the role (including computer, privacy, reliable internet access, phone, ability to video conference, etc.) at a remote location.
Must be able to meet critical thinking and problem solving aspects aligned to job duties, as well as effectively communicating with co-workers.
Able to access information using a computer.

Nice To Haves

Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) are advantageous.
Must be able to travel occasionally should a business need arise.
This role may require lifting, however reasonable accommodations will be provided in accordance with our ADA policies.
Must be able to work more than 40 hours per week when business needs warrant.

Responsibilities

Identify and assess potential IT risks, including cybersecurity threats, vulnerabilities, and compliance gaps.
Conduct risk assessments to evaluate the potential impact and likelihood of identified risks.
Analyze and interpret data related to IT security incidents, breaches, and vulnerabilities.
Develop and implement risk mitigation plans to address identified vulnerabilities and threats.
Collaborate with IT and security teams to design and implement controls to reduce the organization's exposure to risks.
Stay up-to-date with emerging security threats and industry best practices to enhance the effectiveness of risk mitigation strategies.
Monitor and ensure compliance with relevant IT regulations, standards, and frameworks (e.g., GDPR, FERPA, FFIEC, HIPAA, NIST, ISO 27001).
Assist in the development and maintenance of IT policies, procedures, and guidelines to ensure adherence to compliance requirements.
Participate in incident response activities, providing expertise in analyzing and mitigating security incidents.
Collaborate with incident response teams to investigate and remediate security breaches or vulnerabilities.
Prepare and present reports on IT risks, vulnerabilities, and mitigation efforts to management and relevant stakeholders.
Communicate complex technical concepts to non-technical audiences effectively.
Assist in developing and delivering IT security awareness programs to educate employees about security best practices.
Provide guidance and training to employees regarding risk management procedures and policies.
Identify areas for process improvements and recommend solutions to enhance the overall IT risk management program.
Participate in the evaluation and implementation of new technologies and tools to enhance risk assessment and mitigation capabilities.