Information Security Control Assurance Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information security analyst assuring controls, audits, and compliance for Southern New Hampshire University. Managing risk assessments, SSPs, POA&Ms, audits, and governance reporting remotely.
Responsibilities:
- Lead and perform information security risk and compliance assessments across University systems and services
- Develop, maintain, and review System Security Plans, risk assessments, and supporting documentation
- Identify control gaps and security deficiencies, assess risk, and document actionable recommendations
- Manage Plans of Action and Milestones, including tracking remediation, validating corrective actions, and reporting progress
- Coordinate and support internal and external audits and assessments
- Monitor and interpret changes in federal and state information security and data privacy requirements
- Develop and maintain information security policies, standards, procedures, and governance documentation
- Partner with ISMO, Privacy, Legal, and business stakeholders to implement controls and processes
- Prepare and deliver compliance, risk, and audit reporting to management and leadership
- Contribute to continuous improvement of information security governance, risk management, and compliance programs
Requirements:
- 3 years of experience in a related field
- Completion of a Bachelor's Degree or working toward a degree in a related field
- Equivalent of experience in lieu of degree acceptable
- Understanding of technical, administrative, and physical information security controls
- Knowledge of information security governance, risk management, and compliance principles
- Working knowledge of NIST frameworks and standards, including NIST SP 800-53, 800-171, and the Risk Management Framework
- Familiarity with federal and state regulatory requirements and higher education compliance obligations, including GLBA, FERPA, and Simplified FAFSA Act
- Advanced understanding of information security policies, standards, procedures, and governance documentation
- Experience supporting internal and external audits
- Ability to translate complex regulatory and technical security requirements into practical controls and processes
- Working understanding of IT service management concepts and best practices, such as ITIL
Benefits:
- High-quality, low-deductible medical insurance
- Low to no-cost dental and vision plans
- 5 weeks of paid time off
- Almost a dozen paid holidays
- Employer-funded retirement
- Free tuition program
- Parental leave
- Mental health and wellbeing resources
- 100% remote work from an approved state
- Reliable internet connection and dedicated, properly equipped workspace
Similar Jobs
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s application and pipeline security for its media insights business. Driving AWS governance, AI-driven DevSecOps, automated remediation, and security engineering team performance.
Senior Security Engineer
Senior Security Engineer monitoring and responding to threats across Cision’s cloud, identity, endpoint, and Linux environments. Cision provides PR, marketing, and social media management technology.
Security Engineer – Manager
Security Engineering Manager leading zero-trust, IAM, collaboration, and AI workspace security for Binance’s global blockchain ecosystem. Building secure platforms and leading distributed engineering teams.
Principal Security Engineer
Principal Security Engineer reviewing FedRAMP cloud architectures, authorization packages, and security controls. Advising government programs and Cloud Service Providers on NIST compliance and risk.
Senior Cybersecurity Risk & Resilience Consultant
Senior cybersecurity risk consultant assessing technology, cloud, and third-party risks. Strengthening risk frameworks and advising stakeholders on resilience, compliance, and remediation.
Senior Cybersecurity Governance Consultant
Senior Cybersecurity Governance Consultant strengthening an organization’s cybersecurity frameworks, policies, controls, and compliance. Managing governance reporting, exceptions, audits, and regulatory-readiness initiatives.
Cybersecurity Compliance, Technical Controls Consultant
Cybersecurity consultant assessing technical controls, cloud, infrastructure, and regulatory compliance. Managing audits, remediation, evidence, policies, and metrics for a two-year engagement.
Fraud Security Specialist
Fraud Security Specialist protecting CoinPoker’s blockchain-based crypto-poker platform from fraud, money laundering, cheating, and account abuse. Investigating cases, managing transaction queues, and reporting fraud trends.
Senior/Lead – Cyber Security – IAM Engineer, Identity and Governance
Lead IAM Engineer designing cloud-based identity governance and access platforms for FICO, a global analytics software company. Strengthening enterprise security through IAM, PAM, federation, and least-privilege controls.
Information Security Engineer
Information Security Engineer supporting Cisco’s cloud compliance certifications, audits, and security frameworks. Building scalable compliance capabilities across Cisco Cloud offerings.
Security Architect
Security Architect defining API, identity, encryption and integration controls for Intelance’s enterprise architecture and cybersecurity consultancy. Delivering a focused UK programme security review remotely.
Application Security Researcher
Application Security Researcher researching vulnerabilities and autonomous penetration testing for OX Security’s AI-driven security platform. Building detection engines and shipping offensive-security capabilities to production.
Information Security Consultant – m/f/d
Information Security Consultant advising technology-driven Cloud, AI, and Data Center companies in Germany. Building audit-ready ISMS and compliance solutions with customers.
Senior Manager, Security Channel – Market Growth, Splunk
Leading partner go-to-market strategy for Cisco’s Splunk Security portfolio. Scaling launches, sales plays, and readiness programs across global security channel partners.
Senior Manager, Security Channel – Market Growth, Splunk
Security channel growth manager scaling Splunk cybersecurity partner go-to-market motions at Cisco. Driving market readiness, launches, enablement, and partner-led growth across U.S. remote locations.
Senior Director, Product, Security and Privacy
Product Counsel guiding product, privacy, security, and open-source legal strategy for Neo4j’s graph intelligence platform. Enabling compliant innovation across enterprise software, cloud, and AI products.
Cloud Security Administrator
Cloud Security Administrator securing Ballard Spahr’s national law-firm cloud infrastructure. Managing Azure security controls, access, monitoring, audits, and incident response.
SAP S/4HANA Defense & Security Functional Lead
SAP S/4HANA Defense & Security Functional Lead modernizing Department of War operations for CSCI Consulting. Leading transformation workshops, solution design, implementation, testing, and deployment.
Technical Lead – Chief Security Architect, Engineer
Technical Lead and Chief Security Architect securing Federal Government enterprise systems at PingWind. Leading architecture reviews, risk strategies, and modernization across cloud and emerging technologies.
Cloud Security Architect – Engineer
Cloud Security Architect/Engineer designing and assessing secure enterprise cloud solutions for PingWind’s Federal Government clients. Aligning modernization with FedRAMP, RMF, authorization, and architecture requirements.