Job description

Job Title GRC & Compliance Lead Client Company/Dept. Name Western Wyoming Community College Address 2500 College Drive, E-460 City Name Rock Springs State Name WY-Wyoming Zip Code 82901 If others (Address) Duration of the project Project Start Date Nov. 13, 2026 Project End Date 3-year initial term, with renewal options Due date for Resume submission 10/15/2026 No. of Openings 1 No. of Maximum Submissions 1 Job Description Role summary: Leads governance, risk and compliance for WWC's higher education environment. Evaluates controls against FERPA, GLBA and NIST, identifies gaps and produces the audit-ready documentation WWC asked for in Addendum 3, Q18. Also owns security awareness training and the BC/DR consulting workstream. Reports to: vCISO Works with: WWC Financial Aid, Business Office, Registrar, HR, internal audit and IT staff Location: US-based; remote, with onsite workshops for business impact analysis and tabletop exercises Allocation: 0.3–0.5 FTE Key responsibilities: • Run security audits and compliance reviews: a NIST CSF 2.0 / SP 800-171 gap assessment, GLBA Safeguards Rule (16 CFR 314) review for Title IV student financial aid data, FERPA safeguards and PCI DSS scope if WWC takes card payments. • Maintain the security control framework, compliance register and risk register; produce compliance and audit support documentation. • Assess, write and revise cybersecurity policies, standards and procedures; how many policies are needed is set during Discovery & Assessment (Addendum 3, Q17). • Support external audits, state or Wyoming Community College Commission reviews, cyber insurance questionnaires and HECVAT/vendor security reviews. • Run the security awareness and training program for faculty, staff and administration (about 510 users): annual training, role-based modules and monthly phishing simulations, delivered through WWC's LMS or a managed platform, with completion and click-rate reporting. • Lead DR/BC consulting: review existing plans, run business impact analysis, set recovery priorities and dependencies, review backup and recovery strategy, run tabletop exercises and recommend improvements (Addendum 3, Q9). • Run third-party/vendor risk reviews for WWC's technology vendors. Deliverables owned: the compliance gap assessment, compliance and audit support documentation, the cybersecurity policy set (with the vCISO), security awareness training materials and reports, the business impact analysis, and BC/DR plan recommendations. Skill set info Experience: 10+ years in IT governance, risk and compliance or IT audit, including 4+ years in higher education or the public sector Required qualifications: • 10+ years in GRC, IT audit or compliance, including 4+ years supporting colleges, universities or public agencies. • Practical expertise in FERPA, GLBA Safeguards Rule, PCI DSS, NIST CSF and SP 800-53/800-171, and ISO 27001. • Has written institution-wide security policies and BC/DR plans and run business impact analysis. • Experience running security awareness platforms such as KnowBe4, Proofpoint or Microsoft Attack Simulation Training. • Bachelor's degree in IT, Information Systems or Business; Master's preferred. Preferred: experience with Title IV and Federal Student Aid cybersecurity requirements; prior community college compliance engagements. Education Bachelor's degree in IT, Information Systems or Business; Master's preferred. Certifications (if required) Certifications (required: at least one of): CISA, CRISC, CISSP. Preferred: CISM, ISO 27001 Lead Auditor or Lead Implementer, CBCP or MBCI, CDPSE or CIPP/US. Documentation Required for submission Updated Resume Work Hours 0.3–0.5 FTE Account Manager Name (Proposal Team) Work authorization required USC/GC/EAD/H1 also Relocation is accepted No Remote work Yes, remote is fine. Onsite workshops for business impact analysis and tabletop exercises Additional Notes if any Candidate can be based anywhere in the US. Being located in or near Rock Springs, Wyoming is a preference only, not a requirement. Onsite workshops will be needed for business impact analysis and tabletop exercises. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at Privacy Policy - Abacus .

Requirements

Must-haves

GRC & Compliance Lead
Client Company/Dept. Name
Western Wyoming Community College
2500 College Drive, E-460
Rock Springs
If others (Address)
Duration of the project
Project Start Date
Nov. 13, 2026
Project End Date
3-year initial term, with renewal options
Due date for Resume submission
No. of Openings
No. of Maximum Submissions
Reports to: vCISO
Works with: WWC Financial Aid, Business Office, Registrar, HR, internal audit and IT staff
Location: US-based; remote, with onsite workshops for business impact analysis and tabletop exercises
Allocation: 0.3–0.5 FTE
Maintain the security control framework, compliance register and risk register; produce compliance and audit support documentation.
Assess, write and revise cybersecurity policies, standards and procedures; how many policies are needed is set during Discovery & Assessment (Addendum 3, Q17).

Nice-to-haves

Bachelor's degree in IT, Information Systems or Business; Master's preferred.
Preferred: experience with Title IV and Federal Student Aid cybersecurity requirements; prior community college compliance engagements.
Bachelor's degree in IT, Information Systems or Business; Master's preferred.
Certifications (required: at least one of): CISA, CRISC, CISSP. Preferred: CISM, ISO 27001 Lead Auditor or Lead Implementer, CBCP or MBCI, CDPSE or CIPP/US.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: jobdiva
Effort: medium