Information Security Risk Analyst

Apply now Job no: 519527
Work type: Staff
Location: Sacramento
Categories: Unit 9 - CSUEU - Technical Support Services, Probationary, Full Time, Information Systems & Technology, Remote in-state eligible (long distance work arrangement outside business location)

Working Title: Information Security Risk Analyst

Classification Title: Information Technology Consultant - Expert

Posting Details

Priority Application Date (Posting will remain open until filled): Thursday, January 5th @ 11:55pm PST

Please note: As of December 12th, this position has been reposted and is actively accepting new applications. Prior applicants need not re-apply.

Hiring Preference

Eligible on-campus applicants in California State University Employees Union (CSUEU) Bargaining Units 2,5,7, and 9 will be given first consideration in the recruitment.

Position Summary

The IT Risk Analyst reports to the Information Security Officer and provides support for risk identification and management processes across several aspects of information technology and campus business processes. Primary responsibilities include performing vendor security reviews for all procurements, and maintaining an inventory of all systems involving the storage of CSU data or involving critical resources, documenting IT business continuity disaster recovery plans, as well as documenting and maintaining a “risk register” and conducting campus IT risk assessments and risk exceptions. The IT Risk Analyst would maintain information that will allow the Information Security Officer to keep executive management informed about the results of the risk assessments and make recommendations for mitigation. The analyst would interact with campus administrators and vendors on a regular basis and, at times, engage in difficult conversations that will require both empathy and persistence.

FLSA: Exempt (Not eligible for overtime)

CSU Classification Salary Range: $6,686 - $12,947 per month

Hiring Range: $6,700 to $9,000 per month, commensurate with candidate's education, experience, skills, and training.

Salary Grade/Range: 3

Recruitment Type: Regular (Probationary)

Time Base: Full-Time

Pay Plan: 12 months 

Work Hours: Monday through Friday, 8am to 5pm; other hours as required

Remote Work

Full telecommuting (remote work) is available, on an opt-in basis, after successful completion of a hybrid onboarding period (remote and in-person work).

Please visit the following webpage for more information on the CSU Telecommuting Program:

Per our Out of State Employment Policy (see below), a successful candidate must reside within the State of California upon time of hire.

Department Information 

Who is IRT? 
Information Resources & Technology (IRT) partners with faculty, staff, and students to provide essential information technology services that support mission critical activities and innovative technology solutions that facilitate the accomplishment of strategic campus goals at Sacramento State. 

For more information, please visit: 

Minimum Qualifications 

To enter this classification, a basic foundation of knowledge and skills in technical information systems and application program packages is a prerequisite. This foundation would normally be obtained through a bachelor’s degree in computer science, information systems, educational technology, communications, or related fields, or similar certified coursework in applicable fields of study. Foundation knowledge and skills for the Information Technology Consultant, depending on the nature of the position assignment, may include working knowledge of common software application packages, equipment platforms, reference database systems and sources, and training methods and a basic understanding of networks, data communication, and multimedia systems.

Required Qualifications 


  1. Bachelor’s degree from an accredited university, OR equivalent training, certifications, and/or experience.

Knowledge and Skills:

  1. Extensive experience in Information Technology or Information Security.  
  2. Demonstrated familiarity with a broad range of technologies such as networks, servers, file storage, web application architecture, desktop support, application software, and printing in a complex university or organizational setting. 
  3. Demonstrated ability to communicate effectively, both oral and written.
  4. Effective presentation skills.
  5. Experience documenting policies, practices, and procedures.
  6. Experience performing and documenting risk assessments.
  7. Extensive experience working inside and outside the IT organization to facilitate risk assessments, risk evaluation, risk exceptions, and reporting.
  8. Familiarity with different system platforms including web applications, web services, UNIX, and Windows.

Conditions of Employment

  • Ability to pass a background check.

Preferred Qualifications 

  1. At least 3 years of experience in higher education.
  2. At least 5 years of experience in higher education information technology.
  3. At least 3 years of experience in Information Security higher education risk management related position.
  4. Master’s degree.
  5. Security Certification (CISSP, SSCP, GIAC, CEH, etc.).
  6. Experience managing compliance responsibilities in PCI, HIPAA, FERPA environments.
  7. Experience using vulnerability assessment management software.
  8. Experience performing higher education vendor security reviews and assessments.
  9. Familiarity with the EDUCAUSE Higher Education Community Vendor Assessment Tool (HECVAT).
  10. Familiarity with the EDUCAUSE Higher Education Information Security Council (HEISC) and Information Security Program Assessment Tool.
Documents Needed to Apply

Resume and cover letter

Failure to upload required documentation may result in disqualification.

About Sac State

Sacramento State is located in the heart of California’s capital city, five miles from State Capitol. The lush, 300-acre campus is situated along the American River, close to numerous bike trails and other recreational areas. Sacramento, also known as the “Farm-to-Fork Capital,” is one of the most ethnically diverse and livable cities in the country, with a population of half of a million. Sacramento State’s 31,000 students come not only from the Greater Sacramento Region, but also from across the state, country, and world. Our 1800 faculty and 1,500 staff are committed to meeting our mission: “As California’s capital university, we transform lives by preparing students for leadership, service, and success. Sacramento State will be a recognized leader in education, innovation, and engagement.” As the regional hub of higher education, Sac State is dedicated to student successdiversity, equity and inclusioncommunity engagementphilanthropy, and campus safety.  

As evidenced by the values embedded in our Hornet Honor Code, Sacramento State is committed to creating an inclusive environment where all faculty, staff, students, and guests are welcome and valued.  Our commitment is more than simply ensuring that our campus is free from bias and discrimination, but is one devoted to celebrating many diverse identities, life experiences, and perspectives that enrich our community, teaching and learning.  

To learn more about why you should join the Hornet Family, please visit the Why Sac State? page.

Background Check Disclaimer  

A background check (including a criminal records check) must be completed satisfactorily before any candidate can be offered a position with California State University, Sacramento. Failure to satisfactorily complete the background check may affect the application status of applicants or continued employment of current California State University, Sacramento employees who apply for the position. One variation of background check required could be a LiveScan screening, which involves submitting fingerprints at a certified LiveScan Service Center.

COVID-19 Vaccine Certification Information:

CSU requires faculty, staff, and students who are accessing campus facilities to be immunized against COVID-19 or declare a medical or religious exemption from doing so. Any candidates advanced in a currently open search process should be prepared to comply with this requirement. The systemwide policy can be found at and questions may be sent to

Out of State Employment Policy

Sacramento State University, as part of the CSU system, is a State of California Employer. As such, the University requires all employees (up)on date of hire to reside in the State of California.

As of January 1, 2022 the CSU Out-of-State Employment Policy prohibits the hiring of employees to perform CSU-related work outside the state of California.

CSU Telecommuting Program

Sacramento State is participating in the CSU Telecommuting Program. The opt-in program is available for positions within the Management Personnel Plan (MPP), Academic Professionals of California (APC) union, or California State University Employees Union (CSUEU). All CSU employees, regardless of telecommuting status, must still comply with the CSU’s Out of State Employment Policy.

Equal Employment Opportunity

California State University, Sacramento is an Affirmative Action/Equal Opportunity Employer and has a strong institutional commitment to the principle of diversity in all areas. We consider qualified applicants for employment without regard to race, color, religion, national origin, age, sex, gender identity/expression, sexual orientation, pregnancy, genetic information, medical condition, marital status, veteran status, or disability. Sacramento State hires only those individuals who are lawfully authorized to accept employment in the United States. 

It is the policy of California State University, Sacramento to provide reasonable accommodations for qualified persons with disabilities who are employees or applicants for employment. If you need a disability related reasonable accommodation as part of the application and/or interviewing process, visit

The University is committed to creating an education and working environment free from discrimination, sexual harassment, sexual violence, domestic violence, dating violence, and stalking. For more information on mandatory training for new employees, visit . 

Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act and Campus Fire Safety Right-To-know Act Notification

Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act, the current Annual Security Report (ASR) is available for viewing at . 
The ASR contains the current security and safety-related policy statements, emergency preparedness and evacuation information, crime prevention and sexual assault prevention information, and drug and alcohol prevention programming. The ASR also contains statistics of Clery Act crimes for Sacramento State for the last three (3) calendar years. Paper copies are available upon request at the Police Service Center located in the University Union.

Eligibility Verification  

Selected candidate must furnish proof of eligibility to work in the U.S.. California State University, Sacramento is a sponsoring agency (i.e. H-1-B Visa). 

Note to Applicants:

Possession of the minimum qualifications does not guarantee an interview unless required by collective bargaining agreement.

Advertised: Pacific Standard Time
Applications close:

Back to search results Apply now Refer a friend

Applicant Login

Refine search

Work type


Northern California


Appointment Type
Bargaining Unit
Job Search Category/Discipline
Time Basis
Workplace Type (Exclude Inst Fac)