What are the responsibilities and job description for the IT Risk Analyst II position at WGU Product Design?
If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career.
Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.
Pay Range: $108,200.00 - $162,400.00
Essential Functions And Responsibilities
5 days onsite in Salt Lake City, Utah.
Equal Opportunity
As an equal opportunity employer, we recognize our strength lies in our people and commit to creating an inclusive environment where all can thrive, regardless of race, age, gender orientation, sexual orientation, religion, or disability.
Job Description Disclaimer: This position description provides the major duties, responsibilities, requirements, and working conditions for the position. It is intended to be an accurate reflection of the current position; however, management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.
Additional Information
Full-Time Regular Positions (classified as regular and working 40 standard weekly hours): This is a full-time, regular position (classified for 40 standard weekly hours) that is eligible for bonuses; medical, dental, vision, telehealth and mental healthcare; health savings account and flexible spending account; basic and voluntary life insurance; disability coverage; accident, critical illness and hospital indemnity supplemental coverages; legal and identity theft coverage; retirement savings plan; wellbeing program; discounted WGU tuition; and flexible paid time off for rest and relaxation with no need for accrual, flexible paid sick time with no need for accrual, 11 paid holidays, and other paid leaves, including up to 12 weeks of parental leave.
If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career.
Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.
Pay Range: $108,200.00 - $162,400.00
Essential Functions And Responsibilities
5 days onsite in Salt Lake City, Utah.
Equal Opportunity
As an equal opportunity employer, we recognize our strength lies in our people and commit to creating an inclusive environment where all can thrive, regardless of race, age, gender orientation, sexual orientation, religion, or disability.
Job Description Disclaimer: This position description provides the major duties, responsibilities, requirements, and working conditions for the position. It is intended to be an accurate reflection of the current position; however, management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.
Additional Information
Full-Time Regular Positions (classified as regular and working 40 standard weekly hours): This is a full-time, regular position (classified for 40 standard weekly hours) that is eligible for bonuses; medical, dental, vision, telehealth and mental healthcare; health savings account and flexible spending account; basic and voluntary life insurance; disability coverage; accident, critical illness and hospital indemnity supplemental coverages; legal and identity theft coverage; retirement savings plan; wellbeing program; discounted WGU tuition; and flexible paid time off for rest and relaxation with no need for accrual, flexible paid sick time with no need for accrual, 11 paid holidays, and other paid leaves, including up to 12 weeks of parental leave.
Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.
Pay Range: $108,200.00 - $162,400.00
Essential Functions And Responsibilities
- Conduct third-party and supplier risk assessments end to end: scoping, evidence review (SOC 2 reports, questionnaires, contracts), risk analysis, and a clear residual risk conclusion.
- Conduct security risk assessments of internal systems, projects, and applications using industry-accepted frameworks, including NIST and similar standards.
- Perform Open-Source Intelligence (OSINT) research on third parties, suppliers, and applications to establish the security profile of the target of evaluation.
- Work with engineers, architects, and business units to understand how a system, vendor, or project actually works before recommending controls. Recommendations are grounded in that understanding, not in a checklist.
- Recommend security controls that fit the risk and the business context, and support the teams responsible for implementing them.
- Provide guidance to operational teams and third parties on remediating deficiencies identified in assessments. Remediation is owned by the responsible team; the analyst advises.
- Work with IT and business unit management to keep third parties, applications, and suppliers aligned with the university's security requirements.
- Serve as lead analyst on risk analysis, third-party risk, and exception-to-policy efforts as assigned.
- Articulate risk to management in plain language: what the risk is, who it affects, and what it costs to accept or fix.
- Measure, collect, and report on key risk indicators and information security services.
- Identify and build AI efficiencies in risk and assessment workflows, including AI-assisted analysis and agent-based tooling.
- Contribute to security policies, standards, procedures, and assessment methodologies; identify process gaps and drive improvement.
- Act as an advocate for information security, helping the business understand risk, standards, and best practices for third parties and products.
- Bachelor's degree in a related field and 3 years of relevant work experience, 7 years of information security, or 6 years of experience with a relevant certification.
- Working knowledge of risk management frameworks and practices, including NIST.
- Working knowledge of regulations relevant to higher education and data protection, such as FERPA, GLBA, GDPR, and HIPAA.
- Experience assessing security controls and recommending safeguards in a corporate environment.
- Experience with cybersecurity and privacy principles used to manage risk to the use, processing, storage, and transmission of data.
- Experience with AI tools, including building or using AI agents in day-to-day work.
- Strong analytical and problem-solving skills; detail-oriented and results-driven.
- Strong written and oral communication skills, including the ability to explain technical risk to non-technical audiences.
- Industry certification, such as CISSP, CISM, CRISC, or CISA.
- Experience with TPRM platforms or GRC tooling.
- Higher education experience.
5 days onsite in Salt Lake City, Utah.
Equal Opportunity
As an equal opportunity employer, we recognize our strength lies in our people and commit to creating an inclusive environment where all can thrive, regardless of race, age, gender orientation, sexual orientation, religion, or disability.
Job Description Disclaimer: This position description provides the major duties, responsibilities, requirements, and working conditions for the position. It is intended to be an accurate reflection of the current position; however, management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.
Additional Information
Full-Time Regular Positions (classified as regular and working 40 standard weekly hours): This is a full-time, regular position (classified for 40 standard weekly hours) that is eligible for bonuses; medical, dental, vision, telehealth and mental healthcare; health savings account and flexible spending account; basic and voluntary life insurance; disability coverage; accident, critical illness and hospital indemnity supplemental coverages; legal and identity theft coverage; retirement savings plan; wellbeing program; discounted WGU tuition; and flexible paid time off for rest and relaxation with no need for accrual, flexible paid sick time with no need for accrual, 11 paid holidays, and other paid leaves, including up to 12 weeks of parental leave.
- Disclaimer: The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive.
- Accommodations: Applicants with disabilities who require assistance or accommodation during the application or interview process should contact our Talent Acquisition team at recruiting@wgu.edu.
- Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to any protected characteristic as required by law.
If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career.
Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.
Pay Range: $108,200.00 - $162,400.00
Essential Functions And Responsibilities
- Conduct third-party and supplier risk assessments end to end: scoping, evidence review (SOC 2 reports, questionnaires, contracts), risk analysis, and a clear residual risk conclusion.
- Conduct security risk assessments of internal systems, projects, and applications using industry-accepted frameworks, including NIST and similar standards.
- Perform Open-Source Intelligence (OSINT) research on third parties, suppliers, and applications to establish the security profile of the target of evaluation.
- Work with engineers, architects, and business units to understand how a system, vendor, or project actually works before recommending controls. Recommendations are grounded in that understanding, not in a checklist.
- Recommend security controls that fit the risk and the business context, and support the teams responsible for implementing them.
- Provide guidance to operational teams and third parties on remediating deficiencies identified in assessments. Remediation is owned by the responsible team; the analyst advises.
- Work with IT and business unit management to keep third parties, applications, and suppliers aligned with the university's security requirements.
- Serve as lead analyst on risk analysis, third-party risk, and exception-to-policy efforts as assigned.
- Articulate risk to management in plain language: what the risk is, who it affects, and what it costs to accept or fix.
- Measure, collect, and report on key risk indicators and information security services.
- Identify and build AI efficiencies in risk and assessment workflows, including AI-assisted analysis and agent-based tooling.
- Contribute to security policies, standards, procedures, and assessment methodologies; identify process gaps and drive improvement.
- Act as an advocate for information security, helping the business understand risk, standards, and best practices for third parties and products.
- Bachelor's degree in a related field and 3 years of relevant work experience, 7 years of information security, or 6 years of experience with a relevant certification.
- Working knowledge of risk management frameworks and practices, including NIST.
- Working knowledge of regulations relevant to higher education and data protection, such as FERPA, GLBA, GDPR, and HIPAA.
- Experience assessing security controls and recommending safeguards in a corporate environment.
- Experience with cybersecurity and privacy principles used to manage risk to the use, processing, storage, and transmission of data.
- Experience with AI tools, including building or using AI agents in day-to-day work.
- Strong analytical and problem-solving skills; detail-oriented and results-driven.
- Strong written and oral communication skills, including the ability to explain technical risk to non-technical audiences.
- Industry certification, such as CISSP, CISM, CRISC, or CISA.
- Experience with TPRM platforms or GRC tooling.
- Higher education experience.
5 days onsite in Salt Lake City, Utah.
Equal Opportunity
As an equal opportunity employer, we recognize our strength lies in our people and commit to creating an inclusive environment where all can thrive, regardless of race, age, gender orientation, sexual orientation, religion, or disability.
Job Description Disclaimer: This position description provides the major duties, responsibilities, requirements, and working conditions for the position. It is intended to be an accurate reflection of the current position; however, management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.
Additional Information
Full-Time Regular Positions (classified as regular and working 40 standard weekly hours): This is a full-time, regular position (classified for 40 standard weekly hours) that is eligible for bonuses; medical, dental, vision, telehealth and mental healthcare; health savings account and flexible spending account; basic and voluntary life insurance; disability coverage; accident, critical illness and hospital indemnity supplemental coverages; legal and identity theft coverage; retirement savings plan; wellbeing program; discounted WGU tuition; and flexible paid time off for rest and relaxation with no need for accrual, flexible paid sick time with no need for accrual, 11 paid holidays, and other paid leaves, including up to 12 weeks of parental leave.
- Disclaimer: The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive.
- Accommodations: Applicants with disabilities who require assistance or accommodation during the application or interview process should contact our Talent Acquisition team at recruiting@wgu.edu.
- Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to any protected characteristic as required by law.
Salary : $108,200 - $162,400