Senior Analyst, Information Assurance

Overview

About EAB. At EAB, our mission is to make education smarter and our communities stronger. We work with more than 2,800 institutions to drive transformative change through data-driven insights and best-in-class capabilities. From kindergarten to college to career, EAB partners with leaders and practitioners to accelerate progress and drive results across enrollment, student success, institutional strategy, data analytics, and advancement. We tailor our portfolio of research, technology, and marketing and enrollment solutions to meet the unique needs of every leadership team, as well as the students and employees they serve.

At EAB, we serve not only our partner institutions but each other. We are committed to making sure our employees love their jobs and are invested in their communities. This position is located in Washington, DC or Richmond, VA.

Senior Analyst, Information Assurance

The Senior Information Assurance Analyst will assess risks associated with EAB technology applications and platforms and/or third-party service providers that support those platforms. They will support and contribute to business continuity management and planning activities, conduct and support information security audits, assess risks associated with third-party service providers, develop security awareness training content, and support the measurement and reporting of key risk indicators and metrics across the enterprise.

We are a part of the EAB Information Security team. We focus on keeping our partners and colleagues safe from cyber threats and data theft. We value relationship building and stakeholder management across teams and believe diversity drives better solutions. We seek individuals who want to contribute to the mission of making education smarter and our communities stronger.

Compensation for this role includes potential discretionary bonus or incentive compensation and is not limited to the base salary range.

• Plan and execute day-to-day IT audit engagements, including scope development and annual audit planning.
• Perform IT risk assessments and audits of internal initiatives and critical third-party/vendor relationships against industry-standard information security frameworks and regulations (e.g., ISO/IEC 27001, NIST SP 800-53, FAIR, SSAE 18 SOC II Type I & II, DoD frameworks such as NIST 800-171, CMMC, FedRAMP, NIST CSF, FERPA, GDPR, CCPA).
• Review vendor security documentation, questionnaires, and attestations; assess risk impact and recommend risk treatment options.
• Support RFPs/security questionnaires (HECVATs, CAIQ, custom questionnaires) from clients with clear SLAs and maintain Security & Compliance Trust portals.
• Support security assessments for DoD or federally funded service offerings, including data classification and safeguarding requirements.
• Evaluate the design and effectiveness of technology controls throughout the business cycle; identify gaps and risks, and track remediation through to closure.
• Communicate IT audit findings and mitigation strategies to senior management, technology leaders, and the CISO.
• Help identify performance improvement opportunities across EAB business units; assist in developing risk treatment plans for IT and information risks in business operations and technology paradigms.
• Assist with the development and maintenance of information security policies and standards.
• Support the development and maintenance of an information security compliance and metrics program for consistent management reporting of risks to sensitive information and technology resources across the enterprise.
• Assist with prospective hiring and mentoring as the program scales.

• Bachelor’s degree in Computer Science, Information Systems, or equivalent professional experience.
• Minimum of 3+ years of experience as an IT auditor, security analyst, or related field.
• Knowledge of information security and IT risk management concepts and practices, including frameworks and regulatory regimes.
• Ability to work in a fast-paced environment with global, distributed teams.
• Strong understanding of cloud infrastructure and cloud-based SaaS environments.
• Exc…