Information Security Analyst at Harvard University in Boston, Massachusetts

Information Security AnalystBy working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise. We are dedicated to creating a diverse and welcoming environment where everyone can thrive.Harvard Medical School's mission is to nurture a diverse, inclusive community dedicated to alleviating suffering and improving health and well-being for all through excellence in teaching and learning, discovery and scholarship, and service and leadership.You'll be at the heart of biomedical discovery, education, and innovation, working alongside world-renowned faculty and a community dedicated to improving human health. This is more than a job - it's an opportunity to shape the future of medicine.The Security team in the Harvard Medical School Department of Information Technology is seeking an Information Security Analyst to help build and sustain Vulnerability, Cloud and DLP Management solutions and to provide critical operational support for HMS infrastructure. This position offers a breadth of opportunity, ranging from traditional on-prem systems and solutions to contemporary cloud solutions. The Information Security Analyst will work collaboratively with all departments within HMS IT and Harvard University IT.Principal Duties And Responsibilities:Operate recurring vulnerability and compliance reporting, quality-check results, and distribute reports to HMS groups on schedule.Advise system administrators on findings and remediation, and track issues through to verified closure.Run day-to-day execution of the endpoint security compliance effort, ensuring required security agents are deployed and healthy.Monitor cloud security posture, triage misconfigurations, and work with cloud owners to remediate findings.Support vendor risk management, including security reviews and follow-up on identified issues.Triage data loss prevention alerts and coordinate remediation of sensitive data on shared storage.Support security assessments, penetration testing, and the security awareness program.Build dashboards and reports, and use basic scripting to automate recurring tasks.QualificationsBasic Qualifications:Minimum of five years' experience post-secondary education or relevant work experience.Additional Qualifications And Skills:Bachelor's degree in information systems, cybersecurity, or a related field.Working knowledge of vulnerability management fundamentals, including CVE and CVSS, risk prioritization, and remediation timelines.Demonstrated ability to obtain results from technical staff who do not report to you, with strong written and verbal communication skills.Hands-on experience with enterprise vulnerability scanning, endpoint protection, or asset inventory tools.Experience with cloud security posture management and common cloud misconfigurations.Experience with vendor or third-party security risk assessments.Experience with data loss prevention alert triage and sensitive data remediation.Experience with endpoint management and agent deployment at scale.Experience with IT service management or GRC ticketing and reporting.Familiarity with HIPAA, NIST SP 800-53, the NIST Cybersecurity Framework, or comparable frameworks.Experience in higher education, an academic medical center, or a research environment, especially with decentralized IT groups.Strong problem-solving skills, attention to detail, and the ability to act as a trusted advisor.Certificates And Licenses:SecAI+Security+PenTest+CCSKCloud+This position has been determined by school or unit leaders that the duties and responsibilities can effectively be performed fully remotely at a non-Harvard location. Employees in fully remote positions must work all scheduled hours in a Harvard registered state in compliance with the University's Policy on Employment Outside of Massachusetts. At the discretion of the department, fully remote employees may occasionally be required on site at a Harvard location. Certain visa types and funding sources may limit work location. Individuals must meet work location sponsorship requirements prior to employment.This position is salary grade level 058. Please visit Harvard's Salary Ranges to view the corresponding salary range and related information.Harvard offers a comprehensive benefits package that is designed to support a healthy work-life balance and your physical, mental and financial wellbeing. Because here, you are what matters. Our benefits include, but are not limited to:Generous paid time off including parental leaveMedical, dental, and vision health insurance coverage starting on day oneRetirement plans with university contributionsWellbeing and mental health resourcesSupport for families and caregiversProfessional development opportunities including tuition assistance and reimbursementCommuter benefits, discounts and campus perksLearn more about these and additional benefits on our Benefits & Wellbeing Page.Harvard University is committed to equal opportunity and non-discrimination. We seek talent from all parts of society and the world, and we strive to ensure everyone at Harvard thrives. Our differences help our community advance Harvard's academic purposes.Harvard has an equal employment opportunity policy that outlines our commitment to prohibiting discrimination on the basis of race, ethnicity, color, national origin, sex, sexual orientation, gender identity, veteran status, religion, disability, or any other characteristic protected by law or identified in the university's non-discrimination policy. Harvard's equal employment opportunity policy and non-discrimination policy help all community members participate fully in work and campus life free from harassment and discrimination.Equal employment opportunity, including veterans and individuals with disabilities.