Cybersecurity Controls Analyst responsible for evaluating and implementing cybersecurity controls. Ensures university compliance with internal policies and external regulations while working on various systems and infrastructure.
Responsibilities
Develops, assesses and monitors cybersecurity controls across systems, applications, vendors and infrastructure
Conducts risk assessments, controls walkthroughs, and control gap analyses to identify vulnerabilities and recommend mitigation controls-based strategies
Collaborates with IT and business units to implement and validate security controls
Maintains documentation of control effectiveness and remediation efforts
Supports internal and external audits, including evidence collection and control walkthroughs
Ensures compliance with industry standards and regulations (e.g., NIST, CIS Controls, PCI-DSS, HIPAA, FERPA, GLBA)
Develops and maintains cybersecurity policies, procedures, and standards
Monitors regulatory changes and emerging threats to adjust control strategies accordingly
Assists in the development of security awareness and training programs
Performs other duties as assigned
Requirements
Bachelor’s degree in cybersecurity, information technology management, computer science, or a related discipline
Three years of experience in information technology, cybersecurity, IT audit, or risk management, preferably in an academic or research setting
Experience with controls development and control testing methodologies
Strong customer service orientation with the ability to communicate technical concepts to non-technical users
Proficiency with cybersecurity frameworks (e.g., NIST CSF, ISO 27001, COBIT) and compliance standards (e.g., HIPAA, PCI-DSS, GDPR)
Understanding of cybersecurity principles, particularly in regulated environments
Excellent documentation skills
Attention to detail
Strong analytical skills
Strong problem-solving skills
Strong organizational and time management skills
Ability to prioritize multiple tasks
Ability to work independently and collaboratively in a team-oriented environment
Security Specialist providing security assessments and maintaining physical security infrastructure for AES Clean Energy operations. Collaborating on cyber security initiatives and compliance.
Senior Cybersecurity Services Architect providing technical leadership in Operational Technology (OT) cybersecurity across Asia Pacific. Leading design and implementation of cybersecurity solutions.
Cybersecurity Engineer supporting national priority programs through cybersecurity assessments and architecture recommendations. Collaborating on risk management and providing cybersecurity services.
Senior Contractor Program Security Officer overseeing federal security programs. Responsibilities include supervising personnel and executing security protocols for SAPF/SCIF facilities.
Contract Program Security Officer for 2 Circle Consulting Inc. Develops and administers security programs while ensuring compliance with US Government regulations in a Hybrid work setting.
Contract Program Security Officer at 2 Circle Consulting Inc. overseeing government security compliance and managing personnel clearances. Administering security programs and policies in a hybrid role.
Cybersecurity Third - Party Risk Management Consultant leading risk assessments and compliance tracking for NIH/HHS systems. Managing third - party risk with a focus on federal cybersecurity mandates.
Entry - Level Network Security Engineer assisting IT security team with firewall implementation and monitoring. Focused on maintaining network integrity in a hybrid work environment.
Cybersecurity Designer executing and proposing process improvements at Bancolombia. Collaborating on cybersecurity functions to enhance client protection and information security.