What are the responsibilities and job description for the GRC Analyst position at Old Dominion University?
Posting Details
Posting Details
Working Title
GRC Analyst
Position Number
01171A
Department
INFORMATION TECHNOLOGY SERV-ACAD
Location
Norfolk, VA
Type of Position
Classified
Type of Job
EEO Category
B Professionals
Job Description
Support the mission of Information Technology Services and be a strategic part of Old Dominion University as the GRC Analyst. This position serves on the University’s central IT and research support which will be responsible for protecting information and information systems from unauthorized access or use. It will also be responsible for identifying risks and vulnerabilities within University data, systems, and services and informing the Senior GRC Analyst and security team.
Type of Recruitment
Knowledge, skills and abilities
Considerable understanding of systems, its concept of use and architectures, and demonstrated ability to provide an accurate assessment of product security in terms of possible threats and potential avenues of attack. Thorough knowledge of IT Security tools, such as vulnerability scanning, patching tools, and GRC tools. Working knowledge of NIST, CIS, HIPAA, GLBA, PCI, FERPA and other security-related industry standard frameworks and compliance. Some knowledge of technical safeguards and ITS operational IT security and GRC measures. Some knowledge and ability to identify and support engineering activities in a secure research environment. Some competencies in vulnerability management, threat intelligence, insider threats and attacker TTPS. Strong problem solving and analytical skills. Demonstrated ability to determine applicability of IA vulnerability alerts or bulletins to assets. Demonstrated ability to validate security posture of assets such as servers and network devices, using security technical information guides and security requirement guides, endpoint management tools, SIEM or audit logging and response. Demonstrated ability to work on a team. Demonstrated ability to plan work and set priorities.
Demonstrated ability to understand and report on program status and support the implementation of key security practices that support the overall University’s research mission and University strategies. Ability to work with both legacy and emerging solutions to assess and manage business risk with controls.
Special licenses, registration or certification
None
Education or training
None
Level and type of experience
Working experience in cybersecurity in one or more roles, including: security analyst, compliance and regulations, risk management, or audit.
Working experience supporting users and applications using account management tools and policies.
Some experience in supporting and taking responsibility for accreditation/product security assurance activities for key systems.
Some experience in identifying and executing security controls for key systems.
Additional Considerations (supplemental knowledge, skills, abilities, education, experience, licensure, certification)
Working exposure to cloud providers (AWS, GCP, Azure) and security configuration and management.
Working experience in supporting and taking responsibility for accreditation/product security assurance activities for key systems.
Working experience in identifying and executing security controls for key systems.
Working knowledge of technical safeguards and ITS operational IT security and GRC measures.
Security certification preferred
Conditions of Employment
40-hour work week Monday-Friday; Some evenings and weekends; rotating on call. Hybrid work options are available.
This position is designated as sensitive. A fingerprint-based criminal history check will be required of the final candidate.
The employee occupying this position may be required to work during a university closing as directed by their supervisor. These instances may include working from a remote location (i.e., telework, etc.).
This is an open until filled recruitment. This recruitment may close after the five-day required posting period when a suitable pool of applicants has been generated.
This position is designated as sensitive. A fingerprint-based criminal history check will be required of the final candidate.
The employee occupying this position may be required to work during a university closing as directed by their supervisor. These instances may include working from a remote location (i.e., telework, etc.).
This is an open until filled recruitment. This recruitment may close after the five-day required posting period when a suitable pool of applicants has been generated.
Annual Salary/Hourly Rate
Salary commensurate with education and experience
Posting Detail Information
Job Requisition Number
S02575
Job Open To
General Public
Open Date
03/18/2024
Close Date
Open Until Filled
Yes
Special Instructions Summary
None
Criminal Background Check
The final candidate is required to complete a criminal history check.
College Home Page
Department Home Page
odu.edu/its
Equity Statement
It is the policy of Old Dominion University to provide equal employment, educational and social opportunities for all persons, without regard to race (or traits historically associated with race including hair texture, hair type, and protective hairstyles such as braids, locks, and twists), color, religion, sex or gender (including pregnancy, childbirth, or related medical conditions), national origin, gender identity or expression, age, veteran status, disability, political affiliation, sexual orientation or genetic information. Individuals from minoritized communities, women, veterans and individuals with disabilities are encouraged to apply.
Reasonable Accommodation Request
If you are an individual with a disability and require reasonable accommodation, please contact the Office of Institutional Equity & Diversity at (757) 683-3141.
Alternative Hiring Process
In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth’s Alternative Hiring Process.
To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly called a Certificate of Disability) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans may also apply via the AHP if they also provide an AHP Letter.
To request an AHP Letter, use this link: https://www.dars.virginia.gov/drs/cpid/PWContact.aspx or call DARS at 800-552-5019, or DBVI at 800-622-2155.
To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly called a Certificate of Disability) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans may also apply via the AHP if they also provide an AHP Letter.
To request an AHP Letter, use this link: https://www.dars.virginia.gov/drs/cpid/PWContact.aspx or call DARS at 800-552-5019, or DBVI at 800-622-2155.
Pay Transparency Nondiscrimination Provision
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or © consistent with contractor’s legal duty to furnish information.
Supplemental Questions
Required fields are indicated with an asterisk (*).
Applicant Documents
Required Documents
Optional Documents
- Resume
- Cover Letter/Letter of Application
- Other Document
- Yellow Layoff Form
- Blue Layoff Card
- AHP Letter
MANAGEMENT ANALYST
Naval Sea Systems Command -
Portsmouth, VA
Program Analyst
Parsons Technical Services, Inc. -
Norfolk, VA
Billing Analyst
Plasser American Corp -
Chesapeake, VA