JOB SUMMARY:

NORC at the University of Chicago is seeking an IT Risk and Security Compliance Analyst with extensive experience managing and optimizing ServiceNow GRC to support and enhance our security compliance program. This role will play a key part in configuring, maintaining, and improving ServiceNow GRC workflows, ensuring compliance with government security standards such as FISMA, NIST 800-53, HIPAA, and FedRAMP.
The ideal candidate will have strong expertise in GRC tool management, compliance assessments, and risk monitoring. They will work closely with IT and security teams to automate processes, track compliance requirements, and support audits and risk assessments within a hybrid, multi-tenant infrastructure.

REQUIRED SKILLS:

• Bachelor’s degree in management information systems, Computer Science, Business Administration, or related field (or equivalent experience).
• 2 years of experience in IT security, risk assessment, and compliance within a government contract environment.
• Extensive hands-on experience managing and configuring ServiceNow GRC.
• Security Certifications (one or more preferred): CISA, CISM, CRISC, CISSP, or SSCP.
• Strong knowledge of GRC/IRM systems for compliance tracking, risk management, and audit readiness.
• Experience in FedRAMP and FISMA, including security package development and control validation.
• Understanding of hybrid, multi-tenant infrastructure security, including network, server, database, and application security.
• Excellent verbal and written communication skills, with the ability to bridge technical and business perspectives.

WHAT WE DO:

NORC at the University of Chicago is an objective, non-partisan research institution that delivers reliable data and rigorous analysis to guide critical programmatic, business, and policy decisions. Since 1941, our teams have conducted groundbreaking studies, created and applied innovative methods and tools, and advanced principles of scientific integrity and collaboration. Today, government, corporate, and nonprofit clients around the world partner with us to transform increasingly complex information into useful knowledge.

WHO WE ARE:

For over 80 years, NORC has evolved in many ways, moving the needle with research methods, technical applications and groundbreaking research findings. But our tradition of excellence, passion for innovation, and commitment to collegiality have remained constant components of who we are as a brand, and who each of us is as a member of the NORC team. With world-class benefits, a business casual environment, and an emphasis on continuous learning, NORC is a place where people join for the stellar research and analysis work for which we’re known, and stay for the relationships they form with their colleagues who take pride in the impact their work is making on a global scale.