1. Evaluate the security controls for IT solutions of all types (mobile, web, client-server, etc.) both pre-¬ and post‐implementation. 2. Identify overall security requirements for the proper handling of data, and assist architects and system developers in the identification and implementation of appropriate information security. 3. Identify gaps in technologies that could impact the ability of the University to effectively detect and respond to cyber-attacks. 4. Communicate complicated technical security issues and the risks they pose to R&D programmers, network engineers, system administrators and management. 5. Work with departments to identify and classify data according to their sensitivity and their importance to the functioning of the University.
Required Skill/ability 5: Knowledge of security standards and regulations such as NIST, CIS, ISO, HIPAA, PCI DSS, FERPA.
Posting Position Title: Senior Risk and Compliance Analyst
Required Skill/ability 3: Strong foundational knowledge in information technology such as hardware, networking, architecture, protocols, files systems and operating systems. Proven ability application and/or database development. Proven ability in system administration.
Work Week: Standard (M-F equal number of hours per day)
University Job Title: Cyber Security Sr. Risk and Compliance Analyst
Required Skill/ability 1: Working knowledge of the components of risk management, including risk processes, risk quantification, governance and reporting, and technology and systems. Knowledge in IT forensics analysis.
Required Skill/ability 4: Strong business analytical, verbal, and written communications skills. Self-starter with ability to work both independently and in a team environment and to manage multiple tasks/projects in a disciplined and organized fashion while maintaining attention to detail.
Required Skill/ability 2: Conceptually proficient with a wide range of technology allowing the ability to navigate different opinions, and synthesize a single cohesive position based on sometimes conflicting input. Proven ability to communicate complex systems and technical topics staff who may have minimal technical knowledge using oral, written and visual presentations.
Bachelors in a related field and 6 years of work experience, or equivalent combination.
Internal Number: 52621BR
About Yale University
Yale University is an American private Ivy League research university located in New Haven, Connecticut. Founded in 1701 in the Colony of Connecticut, the university is the third-oldest institution of higher education in the United States.
BACK TO TOP
The mission of the University Risk Management and Insurance Association is to advance the discipline of risk management
in higher education.