Cybersecurity Risk Analyst IV

Job Title IT Risk Analyst IV Job Details Job No: 540260 Work Type: Full Time Location: Main Campus (Gainesville, FL) Departments: IT-SECURITY Job Overview UF Information Technology (UFIT) is currently seeking a professional level Cybersecurity Risk Analyst to join the Information Security Office, a unit within UFIT. The IT Risk Analyst IV serves as a professional level position in Information Security, focused on conducting information security risk assessments, providing guidance and recommendations for secure implementation of technology and processes, and continuing improvement and development of the university's risk assessment methodologies to protect the confidentiality, integrity, and availability of UF data and information systems in compliance with law, regulations, policies, and standards at the University of Florida (UF). Additionally, the incumbent will serve as a subject matter expert in matters of information security, providing advice, documentation, training and mentoring to junior staff. Key Responsibilities Execute the UF information risk assessment process, which includes: Conducting risk assessments for internal information systems using established procedures and control baselines Conducting risk assessments on third‑party products and services Developing remediation plans and recommendations to IT staff on how to address risks identified through the risk assessment Preparing executive‑level residual risk reports to prompt risk disposition decisions Guiding units in creating security plans for all systems Establishing and maintaining a non‑technical monitoring program including measures of compliance and effectiveness for administrative processes as well as technical controls related to information security Consult on security systems, tools, and procedures to meet defined security requirements and goals: Assist units in selecting technology that best fits the UF information technology environment and supports UF information security goals Provide expert security guidance to help units improve security posture and reduce risk Guide units in developing processes and procedures to implement UF information security policies and standards Produce and publish documentation and guidance to provide direction to units on complying with information security policies and standards Contribute to development of the UF Information security risk management program, including: Evaluating and providing recommendations regarding legal, regulatory, and contractual information security compliance requirements Serve as subject matter expert on security control frameworks, establishing and updating control baselines to be used at UF Optimize procedures used to conduct information security risk assessments Contribute to the creation and modification of university information security policies and standards Collaborate and advise on changes and improvements to the university's Governance, Risk, and Compliance (GRC) platform used to conduct risk assessments Train and mentor junior risk analysts, interns, and distributed university IT staff on the risk assessment process Contribute content and collateral material to information security training and awareness programs Required Qualifications Bachelor's degree in an appropriate area and four years of relevant experience; or a high school diploma or equivalent and eight years of relevant experience. Appropriate college coursework may substitute at an equivalent rate for the required experience, but does not negate the minimum degree requirements. A Level 2 Criminal Background Screening is required. Preferred Qualifications Bachelor’s, Master’s degree in Computer Science, Cybersecurity, or related field. Global Information Assurance Certification (GIAC) Security Essentials (GSEC) or equivalent (preferred), Certified Information Systems Auditor (CISA) or equivalent (preferred), Certified Information Systems Security Professional (CISSP) or equivalent (preferred). Minimum of 10 years of combined IT and security experience with exposure to data, networks, systems, and web applications. Experience conducting cybersecurity risk assessments in large organizations. Excellent written and verbal communication skills, outstanding interpersonal skills, and the ability to work collegially and interact effectively with all constituencies. Excellent organizational skills and ability to prioritize and complete simultaneous projects with minimal supervision. Advanced level skills in analytical thought, problem‑solving, leadership, teambuilding, conflict resolution, strategic planning, management, and IT project management. Knowledge of security standards, applicable laws and regulations (NIST, HIPAA, HITECH, PCI, FERPA, Florida Statutes); security issues, techniques, and implications across all computer platforms; client/server, network topology, network/infrastructure security; IT auditing and risk management. Broad knowledge of principles of a particular field of specialization; awareness of current standards and trends in IT and emerging technology. Ability to think critically and creatively, demonstrate high integrity, and be motivated to incorporate best practices into the organizational structure. Work collaboratively and build strategic relationships with both internal and external clients. Benefits UF provides various leave programs based on an employee's salary plan, including vacation, sick leave, holidays, personal leave days, and paid family leave. In addition to paid time off, the University of Florida offers a competitive benefits package. EEO Statement The University of Florida is an Equal Employment Opportunity Employer. Hiring is contingent on eligibility to work in the U.S. The University of Florida is a public institution and is subject to all requirements under Florida Sunshine and Public Record laws. If an accommodation due to a disability is needed to apply for this position, please call View phone number on click.appcast.io or the Florida Relay System at View phone number on click.appcast.io (TDD) or visit Accessibility at UF. #J-18808-Ljbffr