Cybersecurity GRC Analyst

Support and maintain the universitys cybersecurity GRC program, with a focus on research computing environments that handle Controlled Unclassified Information (CUI) or other regulated data.Coordinate and perform security assessments and risk evaluations of research systems and projects against applicable regulatory frameworks (e.g., NIST 800-171, CMMC, DFARS, ITAR).Collaborate with research IT, sponsored programs, legal, and research stakeholders to support secure and compliant research practices across the institution.Create, update, and cross-reference controls and documentation across multiple regulatory frameworks to support streamlined and unified GRC practices.Develop and maintain System Security Plans (SSPs), Plans of Action and Milestones (POAandMs), and other required compliance documentation for research programs.Work with ISO staff to extend enterprise policies and GRC tooling to meet the specialized needs of controlled research.Provide consulting and support to researchers and administrators on CUI compliance requirements, secure system design, and data handling best practices.Track and manage identified compliance gaps and risks in alignment with risk management strategies and institutional priorities.Contribute to broader ISO GRC initiatives such as policy development, compliance reporting, and framework alignment activities.Stay up to date on emerging federal compliance regulations and frameworks related to controlled research and incorporate into institutional practices as appropriate.Perform other duties as assigned to support the ISOs cybersecurity and compliance objectives.