Job Vacancy AnnouncementPosition Information
Functional Title Cybersecurity Governance, Risk, and Compliance (GRC) Analyst
Position Type Administrative/Professional
Appointment Type Regular
FTE % 100%
Work Schedule (if atypical)Job Description Summary The Cybersecurity Governance, Risk, and Compliance (GRC) Analyst supports the University's information security governance, risk management, compliance, and cybersecurity awareness programs. The position collaborates with academic and administrative departments, Information Technology, external auditors, and third-party vendors to identify and assess cybersecurity risks, evaluate control effectiveness, support regulatory compliance, and promote sound information security practices across the University.
The GRC Analyst serves as a key liaison between technical and non-technical stakeholders and helps ensure alignment between cybersecurity activities, institutional objectives, risk management priorities, regulatory obligations, and recognized industry frameworks. The University's cybersecurity program is aligned with the NIST Cybersecurity Framework (CSF) 2.0, and this position supports continued maturity across the Govern, Identify, Protect, Detect, Respond, and Recover functions.
Minimum Qualifications - Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Business Administration, or related field, or equivalent combination of education and experience.
- Three (3) years of progressively responsible experience in cybersecurity, compliance, auditing, risk management, information technology, or related disciplines.
- Experience conducting risk assessments, compliance reviews, audits, or policy-related activities.
- Understanding of cybersecurity controls, governance practices, and risk management principles.
- Knowledge of cybersecurity governance, risk, compliance, and audit principles.
- Ability to analyze risks and develop practical recommendations.
- Ability to interpret regulatory and compliance requirements.
- Strong analytical and critical-thinking skills.
- Excellent written, verbal, and presentation skills.
- Ability to effectively communicate cybersecurity risks to technical and non-technical audiences.
- Strong organizational skills and attention to detail.
- Ability to manage multiple projects and priorities simultaneously.
- Ability to maintain confidentiality and exercise sound judgment.
Preferred Qualifications - Experience in higher education or another regulated environment.
- Familiarity with NIST Cybersecurity Framework (CSF), NIST 800-53, NIST 800-171, CIS Controls, ISO 27001, or related frameworks.
- Experience with FERPA, GLBA, PCI-DSS, and privacy regulations.
- Experience supporting third-party risk management and cybersecurity audits.
- Security+, CISA, CRISC, CGRC, CISSP, CySA+, or related certifications.
Benefits Summary Applicants, please note that actual compensation is determined by several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, certifications, relevant education or training, and specific work location, among others. The offered wage or salary is only one aspect of an employee's total compensation
Benefits include a comprehensive health and wellness plan, tuition remission program for employee, spouse, and dependent children, a generous contribution to the University's 403B retirement plan, and a generous time off plan.
Employment is contingent upon successful completion and clearance of a background check and employment verification.
LocationNumber of Vacancies 1
Physical Demands Summary The physical demands include the ability to sit, stand, walk, bend, and lift up to 20 pounds occasionally. Clear verbal and written communication is essential, as the position involves frequent interaction with colleagues, clients, or external partners.
The noise level is generally low to moderate. The position may occasionally involve meeting deadlines or managing multiple priorities, which can require sustained focus and mental stamina.
Do the essential functions of this job require lifting? Yes
If yes, list maximum weight and duration 20lbs
Describe work environment This position is based in a standard office environment and primarily involves sedentary work. Employees are expected to spend extended periods of time working at a desk, using a computer, and engaging in routine office tasks such as emailing, attending m
Duties
Salary Range
Minimum: $98,718.83
Maximum: $115,000.00
Posting Detail Information
Posting Number 2024-251210SA
Special Instructions to Applicants The University of La Verne is unable to provide sponsorship for work visas at this time. Applicants must be authorized to work in the United States without the need for visa sponsorship now or in the future.
Open Date 11/02/2026
Close DateOpen Until Filled No
