Cybersecurity Governance, Risk, and Compliance (GRC) Analyst

Position Type Administrative/Professional Appointment Type Regular FTE %

100%

Work Schedule (if atypical) University Overview

Embark on an exciting journey with the University of La Verne, where your career aspirations come to life in a vibrant and welcoming environment. Established in 1891, our diverse and inclusive community is more than just a university—it’s a home for passionate individuals like you.

At the University of La Verne, we embody four core values that set us apart—Ethical Reasoning, Diversity and Inclusivity, Lifelong Learning, and Civic and Community Engagement. If you’re fueled by these principles and are eager to make a meaningful impact, your journey begins here.

With a rich history spanning 132 years, the University of La Verne boasts a global Leo Family of 89,000+ accomplished alumni. As the #1 private university in California for social mobility according to U.S. News and World Report 2024, and recently recognized as the 33rd Best U.S.

College by the Wall Street Journal 2024, we take pride in our commitment to excellence in education.

Join us in shaping the future, where your passion meets purpose. Come be part of something extraordinary and apply today!

Diversity Statement

The University supports a diverse and inclusive environment where students recognize and benefit from the life experiences and viewpoints of other students, faculty, and staff. Diversity is an active and intentional practice that supports difference and multiplicity to expand knowledge, educate capable citizens, develop the whole person, and serve our local and global communities.

Promoting and sustaining diversity is a commitment to educational quality and the creation of positive, respectful learning communities.

Job Description Summary

The Cybersecurity Governance, Risk, and Compliance (GRC) Analyst supports the University’s information security governance, risk management, compliance, and cybersecurity awareness programs.

The position collaborates with academic and administrative departments, Information Technology, external auditors, and third-party vendors to identify and assess cybersecurity risks, evaluate control effectiveness, support regulatory compliance, and promote sound information security practices across the University.

The GRC Analyst serves as a key liaison between technical and non-technical stakeholders and helps ensure alignment between cybersecurity activities, institutional objectives, risk management priorities, regulatory obligations, and recognized industry frameworks.

The University’s cybersecurity program is aligned with the NIST Cybersecurity Framework (CSF) 2.0, and this position supports continued maturity across the Govern, Identify, Protect, Detect, Respond, and Recover functions.

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Risk Management, Business Administration, or related field, or equivalent combination of education and experience.
• Three (3) years of progressively responsible experience in cybersecurity, compliance, auditing, risk management, information technology, or related disciplines.
• Experience conducting risk assessments, compliance reviews, audits, or policy-related activities.
• Understanding of cybersecurity controls, governance practices, and risk management principles.
• Knowledge of cybersecurity governance, risk, compliance, and audit principles.
• Ability to analyze risks and develop practical recommendations.
• Ability to interpret regulatory and compliance requirements.
• Strong analytical and critical-thinking skills.
• Excellent written, verbal, and presentation skills.
• Ability to effectively communicate cybersecurity risks to technical and non-technical audiences.
• Strong organizational skills and attention to detail.
• Ability to manage multiple projects and priorities simultaneously.
• Ability to maintain confidentiality and exercise sound judgment.

Preferred Qualifications

• Experience in higher education or another regulated environment.
• Familiarity with NIST Cybersecurity Framework (CSF), NIST 800-53, NIST 800-171, CIS Controls, ISO 27001, or related frameworks.
• Experience with FERPA, GLBA, PCI-DSS, and privacy regulations.
• Experience supporting third-party risk management and cybersecurity audits.
• Security+, CISA, CRISC, CGRC, CISSP, CySA+, or related certifications.

Benefits

• Summary Applicants, please note that actual compensation is determined by several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, certifications, relevant education or training, and specific work location, among others.
• The offered wage or salary is only one aspect of an employee’s total compensation Benefits include a comprehensive health and wellness plan, tuition remission program for employee, spouse, and dependent children, a generous contribution to the University’s 403B retirement plan, and a generous time off plan.
• Employment is contingent upon successful completion and clearance of a background check and employment verification.

Location

Number of Vacancies 1 Physical Demands Summary The physical demands include the ability to sit, stand, walk, bend, and lift up to 20 pounds occasionally. Clear verbal and written communication is essential, as the position involves frequent interaction with colleagues, clients, or external partners.

The noise level is generally low to moderate. The position may occasionally involve meeting deadlines or managing multiple priorities, which can require sustained focus and mental stamina.

Do the essential functions of this job require lifting? Yes If yes, list maximum weight and duration 20lbs Describe work environment This position is based in a standard office environment and primarily involves sedentary work. Employees are expected to spend extended periods of time working at a desk, using a computer, and engaging in routine office tasks such as emailing, attending m Duties Salary Range Minimum: $98,718.83

Maximum: $115,000.00

Posting Detail Information Posting Number 2024-251210SA

Special Instructions to Applicants The University of La Verne is unable to provide sponsorship for work visas at this time. Applicants must be authorized to work in the United States without the need for visa sponsorship now or in the future.

Open Date 11/02/2026

Close Date

Open Until Filled No