JOB SUMMARY

The Cybersecurity Controls Analyst is a member of the Information Security team and is responsible for evaluating, implementing, and monitoring cybersecurity controls. This position ensures the university's compliance with internal policies and external regulatory requirements.   

 

PRIMARY JOB RESPONSIBILITIES

•  Develops, assesses and monitors cybersecurity controls across systems, applications, vendors and infrastructure

• Conducts risk assessments, controls walkthroughs, and control gap analyses to identify vulnerabilities and recommend mitigation controls-based strategies

• Collaborates with IT and business units to implement and validate security controls

• Maintains documentation of control effectiveness and remediation efforts

• Supports internal and external audits, including evidence collection and control walkthroughs

• Ensures compliance with industry standards and regulations (e.g., NIST, CIS Controls, PCI-DSS, HIPAA, FERPA, GLBA)

• Develops and maintains cybersecurity policies, procedures, and standards

• Monitors regulatory changes and emerging threats to adjust control strategies accordingly

• Assists in the development of security awareness and training programs

• Performs other duties as assigned

 

KNOWLEDGE, SKILLS, AND ABILITIES

• Proficiency with cybersecurity frameworks (e.g., NIST CSF, ISO 27001, COBIT) and compliance standards (e.g., HIPAA, PCI-DSS, GDPR)

• Understanding of cybersecurity principles, particularly in regulated environments

• Strong customer service orientation with the ability to communicate technical concepts to non-technical users

• Excellent documentation skills

• Attention to detail

• Strong analytical skills

• Strong problem-solving skills

• Strong organizational and time management skills

• Ability to prioritize multiple tasks

• Ability to work independently and collaboratively in a team-oriented environment

 

MINIMUM QUALIFICATIONS

• Bachelors degree in cybersecurity, information technology management, computer science, or a related discipline

• Three years of experience in information technology, cybersecurity, IT audit, or risk management, preferably in an academic or research setting

• Experience with controls development and control testing methodologies

 

PREFERRED QUALIFICATIONS

• Experience with GRC tools

• Professional certifications such as CISA, CISSP, CRISC, or Security+

• Experience in a regulated industry (e.g., education, finance, healthcare)

• Knowledge of cloud security controls (AWS, Azure, GCP)

• Experience supporting research faculty and students in a higher education environment

Logo

About Saint Louis University

Saint Louis University(SLU) is a private, co-educational Jesuit university located in St. Louis, Missouri, United States. Founded in 1818 by the Most Reverend Louis Guillaume Valentin Dubourg SLU is the oldest university west of the Mississippi River. The University has campuses in St. Louis, Mo. and Madrid, Spain. SLU values academic excellence, life-changing research, compassionate health care, and a strong commitment to faith and service. For nearly 200 years, the University has gone beyond teaching facts and figures, encouraging students to form ideas and identities. Today, SLU students are nearly 14,000 strong. The University has invested vast resources to advance academic programs and enhance the student experience. SLU also is a major research institution where premier researchers tackle local and global challenges. And the University's commitment to community service has earned it national acclaim and bolstered its status as a character-building college.

Connections working at Saint Louis University