Apply on Employer Site

UNCF · 1 month ago

Senior IT Security Analyst

Headquarters, Washington, DC, US

Full-time

Hybrid

Senior Level

$110K/yr - $125K/yr

7+ years exp

The United Negro College Fund (UNCF) is an organization dedicated to educational achievement for over 80 years. The Senior IT Security Analyst will drive the development and adoption of Governance, Risk, and Compliance (GRC) frameworks to ensure the confidentiality, integrity, and availability of UNCF’s digital platforms, systems, and services.

EducationNon Profit

Responsibilities

Develop, implement, and maintain GRC frameworks to ensure compliance with industry standards and regulations

Collaborate with various departments to integrate GRC practices into business processes

Assist in proposing, coordinating, implementing, and enforcing information system security policies, standards, and methodologies

Ensure the organization’s compliance with NIST standards and controls

Conduct regular assessments and audits to identify gaps and areas for improvement

Develop and implement corrective action plans to address identified deficiencies

Lead the development and continuous improvement of the ERMP

Identify, assess, and prioritize risks to the organization

Develop risk mitigation strategies and monitor their effectiveness

Design and deliver security awareness training programs for employees

Monitor and report on the effectiveness of training programs

Stay updated on the latest security threats and trends to ensure training content is current and relevant

Develop and implement monitoring and reporting mechanisms to track compliance and risk management activities

Prepare regular reports for senior management and the board of directors

Ensure timely and accurate reporting of compliance and risk management metrics

Work closely with IT, legal, and other departments to ensure a cohesive approach to GRC and NIST compliance

Communicate effectively with stakeholders at all levels of the organization

Qualification

GRC frameworksNIST complianceRisk managementSecurity awareness trainingGovernanceRiskCompliance toolsRelevant certificationsAnalytical skillsCommunication skillsProblem-solving abilitiesTeam management skills