Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Analyst, Cybersecurity Governance, Risk and Compliance role.

Rezi rewrites your resume against Austin Community College's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Analyst, Cybersecurity Governance, Risk and Compliance posting at Austin Community College — free, in seconds.

About the Role

The GRC Analyst assumes a pivotal position within the GRC team, ensuring the organization adheres to regulatory frameworks, effectively manages risks, and upholds exemplary governance standards. This role serves as a vital resource for staff and leadership, offering expertise in information security policy development, implementation, interpretation, and compliance. Additionally, the GRC Analyst plays a crucial role in fostering a security-first culture throughout the organization by spearheading comprehensive training and awareness programs.

Responsibilities

Assists with the development of System Security Plans, Continuous Monitoring, Plan of Action and Milestones, Security Controls Assessment, and Risk Exposure analysis in accordance with TCF/NIST requirements.
Researches, recommends, and contributes to information security policies, standards, and procedure development, including lifecycle management of supporting documents.
Manages an exception review and approval process, ensuring exceptions are documented and periodically reviewed.
Updates security controls and provides support to stakeholders on information security controls covering internal assessments, regulations, and protecting FERPA and Personally Identifying Information (PII).
Assists and performs IT security control effectiveness reviews and manages remediation efforts for identified gaps.
Collaborates with internal teams to conduct regular assessments of information security policies, procedures, and controls for compliance.
Prepares detailed reports on assessment findings, monitors status updates, and ensures effective and sustainable corrective action implementation.
Creates information security and cyber awareness communications and training content for all employees.
Supports the development and upkeep of a measured and managed Security and Privacy training program tailored to roles, with oversight of phishing campaigns.
Stays informed about security industry trends, emerging threats, pertinent regulatory compliance requirements, and best practices.
Participates in cross-functional projects related to risk management, data protection, and security governance.
Conducts third-party supplier risk assessments to oversee supply chain risk, evaluating and communicating business risks and benefits, and enforcing supplier compliance mandates.

Requirements

Must possess required knowledge and be able to explain and demonstrate, with or without reasonable accommodations, that the essential functions of the job can be performed.
Must possess required skills and be able to explain and demonstrate, with or without reasonable accommodations, that the essential functions of the job can be performed.
Candidates must be legally authorized to work in the United States without employer sponsorship.
Work safely and follow safety rules. Report unsafe working conditions and behavior. Take reasonable and prudent actions to prevent others from engaging in unsafe practices.

Skills

Working knowledge of various Security Frameworks, primarily NIST.
Knowledge of information security management, governance, and compliance principles, practices, laws, rules, and regulations.
Knowledge of information technology systems and processes, network infrastructure, and data architecture.
Knowledge of best practices in security training and awareness.
Skills and/or experience in developing/delivering security awareness training either directly or through managed third-party providers/tools.
Skills in business process mapping and documentation as well as policy and procedure development.
Recent experience in Information Security with up-to-date knowledge of the current threat landscape.
Analytical, conceptual thinking, and strategic planning skills.
Proactive self-starter with the talent to think through technical solutions to potentially open-ended problems.
Effectively using interpersonal and communications skills.
Effectively using organizational and planning skills with attention to detail and follow-through.
Maintaining confidentiality of work-related information and materials.
Establishing and maintaining effective working relationships, including the ability to coordinate the work of others.
Strong oral and written communication skills and the ability to work well with people from many different disciplines with varying degrees of technical expertise.
Ability to prioritize assignments while working on multiple projects.

Location

Austin, Texas

Work Type

Onsite

Experience Level

One year of experience working in the technology industry.
Work experience specifically in cybersecurity governance, risk and compliance or related roles.
Work experience in a Texas government or government-adjacent organization.
Work experience in an institution that is FERPA regulated.

Education Level

Bachelor's degree in computer science, Information Technology, or related field
Four (4) years of related work experience or an Associate’s degree plus two (2) years of related work experience may be substituted for the required education

Salary/Compensations

$83,665 - $105,783

Benefits

Valid Texas Driver's License and reliable transportation for travel in the Austin area as required.
ITIL Foundation-level certification or above preferred but not required.
Relevant certifications such as CISSP, CISA, CRISC are preferred but not required.

About the Company

Austin Community College is a public two-year institution that serves a multicultural population of approximately 41,000 credit students each Fall and Spring semester.
We embrace our identity as a community college, as reflected in our mission statement.
We promote student success and community development by providing affordable access, through traditional and distance learning modes, to higher education and workforce training, including appropriate applied baccalaureate degrees, in our service area.
As a community college committed to our mission, we seek to recruit and retain a workforce that values intellectual curiosity and innovative teaching, is attracted by the college's mission to promote equitable access to educational opportunities, cares about student success and collaborates on strategies to facilitate success for populations including; first generation college students, low-income students, and students from underserved communities, is focused on student academic achievement and postgraduate outcomes, welcomes difference and models respectful interaction with others, and engages with the community both within and outside of ACC.

Equal Opportunity

As required by the US Department of Education, employees are required to report violations under Title IX and, under the Jeanne Clery Campus Safety Act (Clery Act), select individuals are required to report crimes.
If this position is identified as a Campus Security Authority (Clery Act), you will be notified, trained, and provided resources for reporting.
Austin Community College produces an Annual Security Report as required by the Clery Act. This report includes statistics from the previous three years concerning reported crime that occurred on campus; public property adjacent to and accessible from campus; and in certain non-campus buildings/property owned or controlled by ACC.
The report includes institutional policies concerning campus security and other safety information.
For direct access to the current Annual Security Report, visit www.austincc.edu/asr . You may obtain a hard copy by contacting the Clery Compliance Officer ( CleryComplianceOfficer@austincc.edu ). For an overview, see ACC's Clery Act website.