IT Risk Analyst

Position SummaryReporting to the Senior Director of Security and Assurance, the IT Risk Analyst assists in designing and implementing disaster recovery and business continuity solutions, user security awareness, security access requests and authorizations, third-party risk management, and compliance monitoring. Additionally, this position collaborates with executive management to quantify acceptable levels of risk for the enterprise and the University’s Internal Audit department to perform audits of Information Technology published policies, processes, and compliance with relevant frameworks. This position may require evening, weekend, and holiday hours.Essential FunctionsAssists in identifying and addressing potential risks to the University’s information systems and operations. Assists in the performance of IT Audits at the direction of the Senior Director, assisting Internal Audit where needed. Manages the Disaster Recovery and Business Continuity Plans of the Office of Information Technology by coordinating with those responsible for systems related to Disaster Recovery planning, including developing, updating, and testing plans. Contributes to the evaluation of the effectiveness of controls, identifies weaknesses, and proactively works with management to ensure conformity with laws, policies, and regulations. Communicates unresolved security exposures, misuse, or noncompliance situations to management. Conducts Disaster Recovery simulations, tabletop exercise(s), and conducts recovery test(s) in partnership with the Office of Information Technology. Identifies areas of concern within contracts with third parties. Analyzes application security needs based on the sensitivity or proprietary nature of the data to ensure all systems are utilized for management-approved purposes only.Preferred QualificationsCRISC and/or CISA certification.Work EnvironmentOffice Environment: Employees are protected from weather conditions or contaminants, but not necessarily occasional temperature changes.