Information Security Operations Engineer

Information Security Operations Engineer

The role of the Information Security Operations Engineer is to drive the implementation of security strategy, identify and mitigate emerging threats and vulnerabilities, and provide protection for our organization's interests. You will align security and technology solutions with business objectives. Collaborate with and inform members of the campus' information security program, including developing and implementing security standards, conducting risk assessments, and gather and report on security performance metrics. As a member of the OIT department this position strives to ensure consistency in communications, actions, and alignment to the strategic plan of the university. This position is also responsible for supporting the mission of the university by delivering technology, services, solutions and guidance to the students, faculty, staff, and the community in a professional, exemplary, service oriented collaborative manner.

Essential Duties Summary - Operational Support: Responsible for daily oversight of the University's security posture ensuring the security and integrity of the University's IT infrastructure. Proactive monitoring and mitigation of security threats and vulnerabilities within the University's enterprise infrastructure, end points and applications. Coordination with the Information Security Leadership and report on technical aspects of security and identity management. Responsible for vendor oversight to comply with university security compliance standards and service-level agreements. Coordinate with change management, incident management and knowledge management to ensure consideration of security controls and testing procedures. Compliance oversight of information security and identity and access management governance processes. Strategic Support: Develop a SecOps program of security and identity, addressing risks and business requirements. Coordination with state programs and agencies for information security oversight Integrate new technologies and automation to ensure agility and security. Define metrics and reporting strategies to measure progress and identify optimization opportunities in the security and identity program. Policy and Compliance Oversight: Monitor and report on compliance with security policies and enforce policies within the University. Propose changes to existing policies and procedures for operational efficiency and regulatory compliance. Security and Identity Liaison: Assist resource owners and IT staff in understanding and responding to audit risks. Provide University communication, awareness, and education. Oversight of security controls within contracts and service-level agreements with vendors and internal departments. Architecture/Engineering Support: Consult with IT and University staff to incorporate security and identity management into hardware, application, and software evaluation, selection, installation, and configuration. Recommend and coordinate the implementation of technical controls to enforce policies.

All Information Technology staff – regardless of their unique position – are expected to perform their assigned duties in a manner consistent with professional standards, with full awareness of responsibilities toward managing personal and institutional data, with priority regard to delivering customer service, with an understanding of the 24/7 nature of IT and the responsibilities that create for them as individuals, and in a constructive and effective collaboration with colleagues.

Education - Bachelor's degree in information systems or related field, or equivalent work experience.

Required Licensing/Certification - Certifications for this role include Azure Security, CISSP, CISM, and CPP

Work Experience - Five (5) years of progressive IT experience, including at least five (2) years in information security or identity management. A solid understanding of industry-standard security frameworks and requirements to include TX-RAMP, NIST, COBIT and GLBA. Ability to maintain the security or integrity of critical infrastructure, which may include communications systems, computer networks and systems, cybersecurity systems, electrical grid, hazardous waste treatment or water treatment system

Desired start date

Position End Date (if temporary)

Posting Detail Information

UA EEO Statement - It is the policy of Texas Southern University to provide a work environment that is free from discrimination for all persons regardless of race, color, religion, sex, age, national origin, individuals with disability, sexual orientation, or protected veteran status in its programs, activities, admissions or employment policies. This policy of equal opportunity is strictly observed in all University employment-related activities such as advertising, recruiting, interviewing, testing, employment training, compensation, promotion, termination, and employment benefits. This policy expressly prohibits harassment and discrimination in employment based on race, color, religion, gender, gender identity, genetic history, national origin, individuals with disability, age, citizenship status, or protected veteran status. This policy shall be adhered to in accordance with the provisions of all applicable federal, state and local laws, including, but not limited to, Title VII of the Civil Rights Act. Manual of Administrative Policies and Procedures

Close Date

Open Until Filled (overrides close field) - Yes

Special Instructions to Applicants - Open to all applicants.