Hiring: IT Risk Analyst II Company: Western Governors University Location: Salt Lake City Metropolitan Area Job Posted Time: 2026-09-16 10:43:00 Employment Type: Full-time Target Skills & Keywords : GDPR, HIPAA, REST, Risk Management, SOC 2, Workday About the job Experience: •Bachelor's degree in a related field and 3 years of relevant work experience, 7+ years of information security, or 6+ years of experience with a relevant certification. •3 years of relevant work experience, 7+ years of information security, or 6+ years of experience with a relevant certification. Required Skills: •Conduct third-party and supplier risk assessments end to end: scoping, evidence review (SOC 2 reports, questionnaires, contracts), risk analysis, and a clear residual risk conclusion. •Conduct security risk assessments of internal systems, projects, and applications using industry-accepted frameworks, including NIST and similar standards. •Perform Open-Source Intelligence (OSINT) research on third parties, suppliers, and applications to establish the security profile of the target of evaluation. •Interface directly with engineers, architects, and business units to understand how a system, vendor, or project actually works before recommending controls. •Recommendations are grounded in that understanding, not in a checklist. •Recommend security controls that fit the risk and the business context, and support the teams responsible for implementing them. •Provide guidance to operational teams and third parties on remediating deficiencies identified in assessments. •Remediation is owned by the responsible team; the analyst advises. Qualifications: •Solid functional working knowledge of risk management frameworks and practices, including NIST. •Solid functional working knowledge of regulations relevant to higher education and data protection, such as FERPA, GLBA, GDPR, and HIPAA. •Strong analytical and problem-solving skills; detail-oriented and results-driven. •Strong written and oral communication skills, including the ability to explain technical risk to non-technical audiences. •Industry certification, such as CISSP, CISM, CRISC, or CISA. •5 days onsite in Salt Lake City, Utah. Compensation: •$108,200 - $162,400 / year Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!