IT Risk & Information Security Analyst

Princeton University is hiring an IT Risk & Information Security Analyst into University Services, the division that runs seven operating departments across campus. The seat leads IT risk management, information security, data privacy, mission continuity, disaster recovery, incident response and security awareness for that whole portfolio. It reports to the Senior Director of Information Technology for University Services, with a dotted line to the University Chief Information Security Officer, which is what gives the role reach beyond its own division.

Day to day the work splits four ways. Security operations: architecture reviews, access audits, vulnerability management, remediation tracking, evidence collection and reporting. Risk and privacy assessment: IT risk assessments, privacy reviews and business impact analyses that decide what gets fixed first. Continuity: writing and testing recovery plans for the systems a campus cannot run without. And incident response, where this person is the first call for University Services and owns escalation through post-incident review.

Regulatory scope is FERPA, GDPR, CCPA and PCI DSS, plus Princeton's own data classification and handling standards. There is a real training component as well, turning policy into guidance staff will actually follow. Princeton asks for five or more years of hands-on IT risk or information security work, incident response experience, security testing proficiency covering vulnerability scanning and code analysis, and a bachelor's degree in IT, cybersecurity or a related field.

CISSP, CISM, CISA or Security+ are preferred, along with higher education experience and work on data governance or responsible data use in a complex organization.

Salary is $105,000 to $120,000. Full time at 36.25 standard weekly hours, benefits eligible, on campus in Princeton, New Jersey.

A cover letter is required for consideration.