The IT Security Risk Analyst performs information security risk assessment and compliance consulting services with general supervision. This position will perform IT solution risk assessments, assist with policy exception reviews, and provide secondary subject matter expert (SME) support for regulatory compliance risk assessments, analyze proposed policy updates and exceptions, and provide other minor security consulting as needed. The IT Security Risk Analyst will perform security and compliance (e.g., HIPAA, FERPA, GLBA, PCI, and other relevant regulations or standards) risk assessments as required by the University and as requested by departments in order to improve information security posture. You will provide security consulting on appropriate administrative, technical, and physical security controls for implementation to address security and compliance requirements. This position includes analyzing and interpreting information to document findings that are presented to management and technical staff. The position promotes awareness of security policies, tools, methodologies, and best practices.

This position will play a critical information security role for Purdue University.

This is a hybrid position where you will work mostly remote and periodically on site at a Purdue campus or office.

This position has a target salary range of $60,100 to $70,975 commensurate with education and experience.

Education and Experience Needed

• A Bachelor's degree in relevant field, including Business, Computer Science, Engineering, Computer/Information Technology, or Information Security
• At least Two (2) years of progressive information technology experience that includes information security and/or compliance responsibilities
• Equivalent combination of education and/or experience may be accepted

Skills Needed:

• Demonstrated ability in documenting controls, information security, or technology control plans
• Experience addressing IT security risks as an IT professional
• Analysis, decision making, problem solving and customer service skills
• Keen attention to detail
• A broad understanding of technology
• Ability to:
  • communicate effectively with both technical and non-technical audiences at various levels within the organization
  • work independently and within a team environment
  • learn new information and put to practical use quickly
  • work on site for assessments

Preferred:

• Higher education work experience
• Experience in performing information security risk and/or compliance assessments
• Experience with common information security standards (e.g., NIST or ISO 27001)
• Technical security certifications or certification progress (e.g., certification pending additional experience) in information security, risk management, or a related discipline (e.g., CISSP and GIAC)

Additional Information:

• Purdue University will not sponsor employment authorization for this position
• A background check will be required for employment in this position
• FLSA: Exempt (Not Eligible for Overtime)
• Retirement Eligibility: Defined Contribution Waiting Period
• Purdue University is an EEO/AA employer fully committed to achieving a diverse workforce. All individuals, including minorities, women, individuals with disabilities, and veterans are encouraged to apply
• Benefit Statement: Purdue University offers a substantial Benefit Package including medical, dental, and vision insurance as well as a generous paid time off package for sick and vacation days