Information Security Analyst

Overview The Information Security Analyst is responsible for implementing the campus information security program, including reviewing security plans and role-based training requirements, operating security tools and scanners, and responding to security alerts. Responsibilities Implement and maintain the campus information security program. Review security plans and training requirements based on roles. Operate security tools and scanners; respond to security alerts and incidents. Develop and maintain strong working relationships with campus stakeholders to protect information assets. Knowledge, Skills, and Abilities Knowledge of information security best practices and IT Governance, Risk Management, and Compliance (GRC), including NIST CSF, NIST SP 800-39, and NIST SP 800-30. Knowledge of NIST SP 800-53 rev 5 controls and the RMF (e.g., NIST SP 800-37). Knowledge of vulnerability scanning and threat mitigation tools (e.g., Microsoft Defender, Tenable/Nessus, Burp Suite). Knowledge of centralized log management tools (e.g., Splunk, Graylog, Microsoft Sentinel, AWS CloudTrail). Knowledge of vulnerability management frameworks (e.g., CIS, STIGs). Understanding of Least Privilege, Separation of Duties; ability to analyze risk and recommend solutions. Effective communication skills (verbal and written) with diverse groups. Ability to develop relationships with management regarding employee system access. Adaptability to maintain high professional standards and thorough, accurate work; understanding of on-premises and cloud system administration. Understanding of defense-in-depth, IT incident response processes, and related security concepts. Familiarity with programming and query languages. Education, Experience, Licensure, Certification Required Education: High school diploma or equivalent (or equivalent professional experience). Additional education or certifications related to information security preferred. Experience: Experience in an information security environment. Current and maintained Information Security certification. Experience documenting security issues. Additional Consideration(s): BA or BS in Information Security, Information Assurance, Computer Science, or related field; Master’s degree preferred. Experience with security awareness initiatives; enterprise-level security architecture, design, and risk remediation. Experience with system authorizations and security documentation (SSP, System Access Requests, POA&M). Experience with centralized logging/SIEM; SIEM dashboards/reports; vulnerability and compliance verification (e.g., Tenable, Nessus, Defender). Experience in a higher education environment is a plus. Salary Starting at $68,534 to $89,094, commensurate with education and experience. Additional Information This position requires on-campus presence; remote work is not available as a standard arrangement. #J-18808-Ljbffr