{"id":142265,"url":"https://alion.io/job/princeton-it-risk-information-security-analyst","title":"IT Risk & Information Security Analyst","company":{"id":15250,"name":"Princeton University","domain":"princeton.edu","url":"https://alion.io/company/princeton","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Princeton, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":198000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"PCI DSS","optional":true}],"status":"live","first_seen_at":"2026-08-27T21:52:36Z","employer_posted_date":"2026-09-20","last_verified_at":"2026-11-05T09:50:19Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":69},"description":"Overview\nUniversity Services at Princeton University is seeking an IT Risk & Information Security Analyst to help strengthen the security, privacy, resilience, and continuity of the systems and data that support a broad portfolio of campus services. This role leads and coordinates IT risk management, information security, data privacy, mission continuity, disaster recovery, incident response, and security awareness efforts across University Services. Reporting to the Senior Director of Information Technology for University Services, with a dotted line to the University Chief Information Security Officer, the analyst will work closely with University Services Information Technology (USIT); the Office of Information Technology (OIT), including the Information Security Office (ISO); departmental leaders; and operational partners to reduce risk and protect critical services.\nThe analyst will serve the IT risk and information security needs of the University Services Office of the Vice President, University Services Administration, and the seven operating departments within University Services. This is a highly collaborative role for someone who can bridge policy, risk, technical controls, operational realities, and user education. The successful candidate will bring sound judgment, practical security and privacy knowledge, strong communication skills, and the ability to turn risk findings into clear, actionable improvements.\nA cover letter is required for full consideration. A full job description will be furnished prior to interview.\nResponsibilities\nLead system and data security initiatives, including security architecture reviews, access audits, vulnerability management, remediation tracking and coordination, evidence collection, monitoring, reporting, and continuous risk reduction efforts to protect University Services systems and data and support compliance with university security standards and policies.\nSupport compliance with applicable regulations, standards, and University policies, including FERPA, GDPR, CCPA, PCI, and privacy-aware handling of sensitive and regulated data.\nConduct IT risk assessments, privacy reviews, and business impact analyses to identify threats, evaluate operational impacts, prioritize mitigation, and strengthen resilience.\nPartner with USIT, ISO, OIT, and departmental teams on data classification, responsible data handling, retention, access management, endpoint protection, and secure system operations.\nPerform or coordinate system and application security testing, vulnerability scanning, remediation follow-up, and related reporting using appropriate tools, dashboards, and automation.\nDevelop, maintain, and test mission continuity and disaster recovery plans for critical University Services functions, systems, applications, and data.\nServe as the primary University Services point of contact for security incidents, coordinating response, escalation, remediation, communication, post-incident review, and improvement activities.\nDesign and deliver security and data privacy awareness training for staff, translating policies, threats, and best practices into practical guidance for diverse audiences.\nPrepare concise reports, metrics, briefings, and recommendations that help leaders understand risk, track progress, and make informed decisions.\nWorks on special projects as assigned.\nQualifications\nESSENTIAL QUALIFICATIONS\n5+ years of relevant professional, hands-on experience in an IT risk management and/or information security role.\nExperience with security incident response and management.\nFamiliarity with regulatory requirements and compliance standards.\nKnowledge of data classification and management practices.\nKnowledge of data privacy principles, privacy-aware data handling practices, and requirements related to sensitive and regulated data.\nProficiency in security testing tools and methodologies (e.g. vulnerability scanning, penetration testing, static and/or dynamic code analysis, etc.).\nExperience using tools, automation technologies, dashboards, reporting platforms, or workflow systems to improve security operations, risk tracking, audit readiness, and remediation tracking, coordination, and follow-through.\nStrong knowledge of security and privacy frameworks and best practices.\nAbility to work collaboratively with cross-functional teams.\nStrong communication and interpersonal skills.\nAbility to foster and maintain positive and professional working relationships; ability to effectively handle interpersonal interactions at all levels and respond appropriately to conflicts and problems.\nAbility to work with complex confidential information and/or issues using discretion and judgement.\nExcellent written/oral communication skills in order to present findings to all levels of management.\nPossess organizational skills to handle several projects simultaneously, accommodate shifting priorities, and meet deadlines.\nAbility and drive to stay current with and report on the rapidly evolving risk and information security landscape.\nEducation: Bachelor's degree in Information Technology, Cybersecurity, or a related field\nPREFERRED QUALIFICATIONS\nRelevant and active certifications such as CISSP, CISM, CISA, or Security+.\nProfessional experience in a higher education environment.\nExperience with the Family Educational Rights and Privacy Act (FERPA)\nExperience with the Payment Card Industry Data Security Standards (PCI DSS)\nExperience with privacy, data governance, data classification, or responsible data use initiatives in a complex organization.\nExperience developing scripts, integrations, reports, or automated workflows that reduce manual effort and improve risk, security, compliance, or privacy processes.\nExperience training, developing, and improving others’ understanding of risk and information security.\n________________________________\nPrinceton University is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability status, protected veteran status, or any other characteristic protected by law.\nThe University considers factors such as (but not limited to) scope and responsibilities of the position, candidate's qualifications, work experience, education/training, key skills, market, collective bargaining agreements as applicable, and organizational considerations when extending an offer. The posted salary range represents the University's good faith and reasonable estimate for a full-time position; salaries for part-time positions are pro-rated accordingly.\nIf the salary range on the posted position shows an hourly rate, this is the baseline; the actual hourly rate may be higher, depending on the position and factors listed above.\nThe University also offers a comprehensive benefit program to eligible employees. Please see this link for more information.\nStandard Weekly Hours\n36.25Eligible for Overtime\nNoBenefits Eligible\nYesProbationary Period\n180 daysEssential Services Personnel (see policy for detail)\nNoPhysical Capacity Exam Required\nNoValid Driver’s License Required\nNoExperience Level\nMid-Senior LevelSalary Range\n$105,000 to $120,000","description_format":"text","description_chars":7264,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Education","Higher Education"],"lifecycle":[{"event":"open","at":"2026-08-27T21:52:36Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.647,"p_room":0.28,"age_days":69,"expected_fill_days":23,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/princeton-it-risk-information-security-analyst","json_url":"https://alion.io/job/princeton-it-risk-information-security-analyst.json","meta":{"generated_at":"2026-11-05T10:19:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13101,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15250},"rest":"https://alion.io/mcp/rest/get_company?id=15250"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprinceton-it-risk-information-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprinceton-it-risk-information-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprinceton-it-risk-information-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/princeton-it-risk-information-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprinceton-it-risk-information-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":142265}},{"tool":"search_jobs","arguments":{"company":"princeton.edu","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":142265},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}