Information Security Administrator

Information Security Administrator

The Information Security Administrator plays a key role in protecting the organization's information systems, applications, and data assets. This position is responsible for administering security technologies, supporting governance and compliance initiatives, monitoring and responding to security events, and implementing controls that reduce organizational risk. Working closely with IT leadership, system owners, and business stakeholders, the Information Security Administrator helps ensure the confidentiality, integrity, and availability of institutional data and technology resources.

Responsibilities include administering, monitoring, and maintaining information security technologies, protecting systems and applications that store, process, or transmit sensitive and regulated data, implementing and maintaining identity and access management controls, monitoring security alerts, investigating potential threats, and coordinating remediation activities to mitigate organizational risk. The role also involves conducting security assessments, vulnerability reviews, and configuration audits, analyzing security incidents, supporting the development, implementation, and maintenance of information security policies, standards, procedures, and best practices, participating in risk assessments, control evaluations, and remediation planning, assisting with compliance initiatives, audits, regulatory reviews, and security assessments aligned with applicable laws, regulations, and industry frameworks, maintaining security documentation, reports, and records to support compliance, audit readiness, and operational effectiveness, supporting business continuity, disaster recovery, and incident response planning and testing activities, collaborating with IT teams, system owners, and business stakeholders to implement security controls and mitigate risk, providing guidance on secure system design, implementation, configuration, and change management practices, leading teams to conduct in-depth information technology risk assessments; making recommendations and designing improvements to IT security procedures, guiding communications with users to understand their security needs and supporting the implementation of procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.

Minimum qualifications include a college or university degree in a related field and 5-7 years of work experience in a related job discipline. Preferred qualifications include a bachelor's degree in information technology, computer science, cybersecurity, or a related field, hands-on information security experience in an enterprise environment, background analyzing security events, identifying root causes, and recommending corrective actions, Security+ certification or an equivalent industry-recognized security certification, advanced certifications, proficient at securing systems containing sensitive or regulated data, including HIPAA, PII, FERPA, or similar data classifications, working knowledge of cybersecurity principles, access control methodologies, identity management, and security operations practices. Strong analytical, troubleshooting, and problem-solving skills strongly preferred. Effective written, verbal, and interpersonal communication skills.

This position is currently expected to work a minimum three days per week in the office. The University of Chicago offers a wide range of benefits programs and resources for eligible employees, including health, retirement, and paid time off. Information about the benefit offerings can be found in the Benefits Guidebook.