Senior IT GRC Analyst - OIT at Emory University

Atlanta, Georgia, United States -

Full Time

Start Date

Immediate

Expiry Date

08 May, 26

Salary

0.0

Posted On

07 Feb, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Governance, Risk, Compliance, Information Security Policy, Risk Management, Regulatory Compliance, Risk Assessment, Continuous Monitoring, Security Awareness, Security Audits, Project Management, Security Infrastructure Tools, Data Analysis, Team Leadership

Industry

Higher Education

Description

Discover Your Career at Emory University Emory University is a leading research university that fosters excellence and attracts world-class talent to innovate today and prepare leaders for the future. We welcome candidates who can contribute to the excellence of our academic community. Description KEY RESPONSIBILITIES: The Senior IT GRC (Governance, Risk, and Compliance) Analyst oversees technical design, implementation, maintenance, and responsibilities for multiple information security disciplines such as security policy, awareness and education, risk management, and regulatory compliance. Coordinates enterprise-wide risk assessment, risk remediation, continuous monitoring, and IT compliance documentation and reporting efforts. Coordinates the development and implementation of enterprise-wide information security policies, standards, and guidance in alignment with relevant compliance regimes, institutional strategies, and industry best practices. Manages the creation and dissemination of regular enterprise-wide information security awareness and training efforts through multiple communication channels. Determines and documents information security requirements and controls necessary for the protection of information resources. Implements and administers plans, processes, and procedures necessary to ensure compliance with regulatory frameworks. Provides guidance and assistance regarding information security matters such as the interpretation of information security policies and requirements or their applicability to particular situations. Manages detailed network, operating system, database, and application compliance assessments and security configuration audits. Manages and participates in information security projects and initiatives. Supports, maintains, monitors, troubleshoots and enhances security infrastructure tools, methodologies, software, and hardware. Analyzes data from Information Security functions and provides reports and recommended response actions to Information Security management. Represents Information Security to other organizations on information security related matters, as assigned. Publishes regular status reports and submits to management. Performs other related duties as required. Level: An experienced cybersecurity professional, typically obtained through advanced education and work experience. Works independently with minimal supervision. Leads other team members through specific tasks and provides guidance. Stands in for department leadership when they are unavailable. Responsibilities typically include: Establishing operational plans for job area; Developing and implementing new products, processes, standards or operational plans that will have impact on the achievement of functional results. Problems faced are difficult to complex. Requires communication with cybersecurity and IT leadership and occasional communication with senior leadership across the enterprise. MINIMUM QUALIFICATIONS: A bachelor's degree and six years of related IT experience including demonstrated expertise in multiple information security domains, project management skills, OR an equivalent combination of education, training and experience. Excellent project management and team participation skills. Good written and verbal communication skills. NOTE: Tasks related to this position can be performed remotely with only occasional visits to an Emory University location. Eastern (EST) time zone business hours may apply. Emory reserves the right to change this status with notice to employee. Emory does not approve as a primary work location in the following states; NJ, AK, and HI, any U.S. Territories or outside of the United States. Additional Details Emory is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by state or federal law. Emory University does not discriminate in admissions, educational programs, or employment, including recruitment, hiring, promotions, transfers, discipline, terminations, wage and salary administration, benefits, and training. Students, faculty, and staff are assured of participation in university programs and in the use of facilities without such discrimination. Emory University complies with Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act, and applicable executive orders, federal and state regulations regarding nondiscrimination, equal opportunity, and affirmative action (for protected veterans and individuals with disabilities). Inquiries regarding this policy should be directed to the Emory University Department of Equity and Civil Rights Compliance, 201 Dowman Drive, Administration Building, Atlanta, GA 30322. Telephone: 404-727-9867 (V) | 404-712-2049 (TDD). Emory University is committed to ensuring equal access and providing reasonable accommodations to qualified individuals with disabilities upon request. To request this document in an alternate format or to seek a reasonable accommodation, please contact the Department of Accessibility Services at accessibility@emory.edu or call 404-727-9877 (Voice) | 404-712-2049 (TDD). We kindly ask that requests be made at least seven business days in advance to allow adequate time for coordination.

Responsibilities

The Senior IT GRC Analyst oversees the technical design, implementation, and maintenance of multiple information security disciplines, including policy, risk management, and compliance. This role coordinates enterprise-wide risk assessments, remediation efforts, continuous monitoring, and IT compliance documentation and reporting.