{"21311354":{"jobPath":"/jobs/21311354/security-officer-2nd-shift-mon-fri-3-11pm","source":"naylor","job":"21311354","jobTitle":"Security Officer - 2nd Shift (Mon-Fri 3-11pm)"},"21367637":{"jobPath":"/jobs/21367637/assistant-to-the-president-and-recording-secretary-for-the-district-governing-board","source":"naylor","job":"21367637","jobTitle":"Assistant to the President and Recording Secretary for the District Governing Board"},"21355872":{"jobPath":"/jobs/21355872/it-asset-coordinator","source":"naylor","job":"21355872","jobTitle":"IT Asset Coordinator"},"21355794":{"jobPath":"/jobs/21355794/employee-expense-process-audit-coordinator","source":"naylor","job":"21355794","jobTitle":"Employee Expense Process Audit Coordinator"},"21355453":{"jobPath":"/jobs/21355453/manager-of-councils-university-faculty-governance","source":"naylor","job":"21355453","jobTitle":"MANAGER OF COUNCILS, University Faculty Governance"},"21356185":{"jobPath":"/jobs/21356185/it-architect-4-0531u-job-78421-berkeley-institutes-for-data-science-bids","source":"naylor","job":"21356185","jobTitle":"IT Architect 4 (0531U) Job 78421 - Berkeley Institutes for Data Science (BIDS)"},"21355449":{"jobPath":"/jobs/21355449/computer-and-information-science-cis-cybersecurity-faculty-tenure-track","source":"naylor","job":"21355449","jobTitle":"Computer And Information Science (Cis)/Cybersecurity Faculty, Tenure Track"},"21303596":{"jobPath":"/jobs/21303596/corporate-securities-associate","source":"naylor","job":"21303596","jobTitle":"Corporate & Securities Associate"},"21354158":{"jobPath":"/jobs/21354158/revenue-cycle-application-analyst-i-is-revenue-cycle-apps-full-time-8-hour-days-non-exempt-non-union","source":"naylor","job":"21354158","jobTitle":"Revenue Cycle Application Analyst I - IS Revenue Cycle Apps - Full Time 8 Hour Days (Non-Exempt) (Non-Union)"},"21349550":{"jobPath":"/jobs/21349550/associate-director-security-operations-center","source":"naylor","job":"21349550","jobTitle":"Associate Director, Security Operations Center"},"21334309":{"jobPath":"/jobs/21334309/housing-security-officer","source":"naylor","job":"21334309","jobTitle":"Housing Security Officer"},"21332405":{"jobPath":"/jobs/21332405/director-of-research-and-analytics-department-of-biomedical-informatics-and-grc-health-services-and-population-health-associate-full-professor","source":"naylor","job":"21332405","jobTitle":"Director of Research and Analytics - Department of Biomedical Informatics and GRC, Health Services and Population Health (Associate/Full Professor)"},"21299996":{"jobPath":"/jobs/21299996/director-of-contracts-and-insurance-risk-management","source":"naylor","job":"21299996","jobTitle":"Director of Contracts and Insurance Risk Management"},"21363106":{"jobPath":"/jobs/21363106/analyst-business-data-is-clinical-research-full-time-8-hour-days-exempt-non-union","source":"naylor","job":"21363106","jobTitle":"Analyst, Business Data - IS Clinical Research - Full Time 8 Hour Days (Exempt) (Non-Union)"},"21358411":{"jobPath":"/jobs/21358411/imaging-application-analyst-ii-is-imaging-apps-full-time-8-hour-days-non-exempt-non-union","source":"naylor","job":"21358411","jobTitle":"Imaging Application Analyst II - IS Imaging Apps - Full Time 8 Hour Days (Non-Exempt) (Non-Union)"},"21331297":{"jobPath":"/jobs/21331297/security-officer-security-full-time-8-hour-rotating-shift-non-exempt-non-union","source":"naylor","job":"21331297","jobTitle":"Security Officer - Security - Full Time 8 Hour Rotating Shift (Non-Exempt)(Non-Union)"},"21355321":{"jobPath":"/jobs/21355321/senior-firewall-security-engineer","source":"naylor","job":"21355321","jobTitle":"Senior Firewall Security Engineer"},"21300842":{"jobPath":"/jobs/21300842/licensed-therapists-for-high-risk-team-in-counseling-and-mental-health-cmh-clinical-instructor-or-assistant-professor-of-psychiatry-and-the-behavioral-sciences","source":"naylor","job":"21300842","jobTitle":"Licensed Therapists for High Risk Team in Counseling and Mental Health (CMH) / Clinical Instructor or Assistant Professor of Psychiatry and the Behavioral Sciences"},"21355460":{"jobPath":"/jobs/21355460/lead-identity-and-access-management-architect-is-t-information-security","source":"naylor","job":"21355460","jobTitle":"LEAD IDENTITY AND ACCESS MANAGEMENT ARCHITECT, IS&T Information Security"},"21308734":{"jobPath":"/jobs/21308734/director-cybersecurity-officer","source":"naylor","job":"21308734","jobTitle":"Director - Cybersecurity Officer"},"21298738":{"jobPath":"/jobs/21298738/assistant-vice-president-emergency-management-resilience-security-operations","source":"naylor","job":"21298738","jobTitle":"Assistant Vice President, Emergency Management, Resilience, & Security Operations"},"21354168":{"jobPath":"/jobs/21354168/licensed-therapists-for-high-risk-team-in-counseling-and-mental-health-cmh-clinical-instructor-or-assistant-professor-of-clinical-psychiatry-and-the-behavioral-sciences-clinican-educator","source":"naylor","job":"21354168","jobTitle":"Licensed Therapists for High Risk Team in Counseling and Mental Health (CMH) / Clinical Instructor or Assistant Professor of Clinical Psychiatry and the Behavioral Sciences (Clinican Educator)"},"21355115":{"jobPath":"/jobs/21355115/it-business-analyst","source":"naylor","job":"21355115","jobTitle":"IT Business Analyst"},"21330298":{"jobPath":"/jobs/21330298/it-support-technician-i-ii-and-iii","source":"naylor","job":"21330298","jobTitle":"IT Support Technician I, II, and III"},"21333369":{"jobPath":"/jobs/21333369/part-time-faculty-cybersecurity-instructor","source":"naylor","job":"21333369","jobTitle":"Part-time Faculty Cybersecurity Instructor"}}
This job description is intended to describe the general nature and level of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.
JOB SUMMARY
The Governance, Risk, and Compliance (GRC) Analyst supports compliance and governance initiatives for both government and higher education environments. The GRC Analyst implements and maintain National Institute of Standards and Technology (NIST) -compliant frameworks, supporting the government's Cybersecurity Maturity Model Certification (CMMC) requirements, and ensuring adherence to security controls across diverse environments. The GRC Analyst will collaborate with teams to assess risk, manage compliance documentation, and ensure that security frameworks and controls are implemented effectively and efficiently.
This position requires occasional availability outside of traditional working hours to address urgent business needs as they arise, including responding to security incidents, supporting software deployments, resolving software issues or system breaks, and addressing other critical operational requirements. The GRC Analyst mitigates disruption to business operations by promptly addressing any issues, regardless of time or day.
This role is hybrid and in the office a minimum of three days a week to facilitate collaboration and teamwork. In-office presence is an essential part of our on-campus culture and allows for engaging directly with staff and students, sharing ideas, and contributing to a dynamic work environment. Being on-site allows for stronger connections, more effective problem-solving, and enhanced team synergy, all of which are key to achieving our collective goals and driving success.
*Applicants must be authorized to work in the United States. The University is unable to work sponsor for this role, now or in the future
MINIMUM QUALIFICATIONS
Proficiency with Cybersecurity Maturity Model Certification and NIST frameworks and controls.
Knowledge of compliance standards in government and higher education environments.
Effective written and verbal communication skills to convey information and explain complex compliance requirements to various stakeholders at different organizational levels
Adaptable, high initiative and strong sense of urgency
Ability to analyze complex data, identify patterns, and translate findings into actionable insights as well as to evaluate risks and develop appropriate responses.
Knowledge and skills required for this position are generally acquired through a bachelor's degree and at least 2-4 years of experience.
KEY RESPONSIBILITIES & ACCOUNTABILITIES
1) Support CMMC compliance efforts within a government environment. 25%
2) Assist in implementing NIST-based security frameworks and controls in a higher education setting. 25%
3) Conduct risk assessments and audits to ensure compliance with security standards. 25%
4) Develop and maintain compliance documentation and reporting. 25%
Position Type
Legal and Regulatory Administration
Additional Information
Northeastern University considers factors such as candidate work experience, education and skills when extending an offer.
Northeastern has a comprehensive benefits package for benefit eligible employees. This includes medical, vision, dental, paid time off, tuition assistance, wellness & life, retirement- as well as commuting & transportation. Visit https://hr.northeastern.edu/benefits/ for more information.
All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, religion, color, national origin, age, sex, sexual orientation, disability status, or any other characteristic protected by applicable law.
Compensation Grade/Pay Type: 110S
Expected Hiring Range: $75,210.00 - $106,230.00
With the pay range(s) shown above, the starting salary will depend on several factors, which may include your education, experience, location, knowledge and expertise, and skills as well as a pay comparison to similarly-situated employees already in the role. Salary ranges are reviewed regularly and are subject to change.
Founded in 1898, Northeastern University is a private research university located in the heart of Boston. Northeastern is a leader in worldwide experiential learning, urban engagement, and interdisciplinary research that meets global and societal needs. Our broad mix of experience-based education programs?our signature cooperative education program, as well as student research, service learning, and global learning?build the connections that enable students to transform their lives. The University offers a comprehensive range of undergraduate and graduate programs leading to degrees through the doctorate in nine colleges and schools.