Information Security Analyst

Working Title Information Security Analyst 00720 Role Title Information Technology Specialist II Position Number 00720 FLSA Exempt Appointment Type Full Time Type of Posting General Public Is Sensitive Position? No Designated Personnel Yes Responsible Employee Statement This position is designated as a “responsible employee” who has the authority to redress sexual violence, who has the duty to report incidents of sexual violence or other student misconduct, or who a student could reasonably believe has this authority or duty. Designated Personnel Statement This position is a “designated position” meaning this position could potentially be required to work (depending on the event) during an emergency closing. Statement of Economic Interest No Departmental Objective To inspire and foster partnerships that focus on innovative solutions for ubiquitous access and use of information services to support educational and cultural opportunities that benefit the CNU community. Purpose of the Position The Information Security Analyst is responsible for implementing the campus’ information security program to include reviewing security plans and role-based training requirements, operating security tools and scanners, and responding to security alerts. Knowledge, Skills, and Abilities Related to Position Knowledge of general concepts of information security best practices; IT Governance, Risk Management, and Compliance (GRC) for example NIST CSF, NIST SP 800-39 and NIST SP 800-30 Knowledge of NIST SP 800-53 rev 5 security controls and the Risk Management Framework (e.g. NIST SP 800-37) Knowledge of vulnerability scanning and threat mitigation tools such as Microsoft Defender, Tenable Security Center / Nessus, Burp Suite Knowledge of centralized log management tools such as Splunk, Graylog, Microsoft Sentinel, AWS CloudTrail Knowledge of common vulnerability management frameworks such as CIS or STIGs Knowledge of security concepts such as Least Privilege; and Separation of Duties Ability to think critically, analyze risk, consider possible solutions, and make recommendations Ability to communicate effectively both verbally and in writing with diverse groups of organizations and people Ability to develop relationships with and provide guidance to all levels of management regarding employee system access Willingness to be very flexible, ability to maintain the highest professional standards and competence to be accurate, thorough, and productive with all work Understanding of system administration for both on-premises and cloud systems Understanding of defense-in-depth and common security elements Understanding of the IT Incident Response processes Regulations such as FERPA, GLBA, PCI Knowledge of firewalls and IDS/IPS concepts, such as Palo Alto Demonstrated understanding of technical, engineering, and programmatic capabilities related to information systems and/or subsystems Familiarity with programming and query languages Education, Experience, Licensure, Certification Required Education: High school diploma or equivalent education/experience that equates to a high school diploma Experience: Previous experience in an information security environment Possession of a current and maintained Information Security certification Experience documenting security issues Additional Consideration(s) Education: BA or BS in Information Security, Information Assurance, Computer Science, or related equivalent professional experience A Master’s degree in Computer Science, Cybersecurity, or related technical field Experience: Experience with security awareness initiatives and training Experience with information security to include managing systems security architecture, design, and/or operational planning on an enterprise level Experience with information security to include managing systems security installation and risk remediation activities on an enterprise level Experience with system authorizations and supporting security documentation development such as System Security Plans (SSP) Experience with system authorizations and supporting security documentation development such as System Access Requests Experience with system authorizations and supporting security documentation development such as Plans of Actions and Milestones (POA&M) Significant experience working with centralized logging solutions (Security Incident and Event Management, SIEM) Experience working with parsing events for SIEM ingestion Experience developing SIEM dashboards/reports Demonstrated hands‑on experience with continuous monitoring, including vulnerability and compliance verification (using solutions such as Tenable Security Center / Nessus, Microsoft Defender, and/or other similar solutions) Experience working in a higher education environment Salary Information Starting at $68,534 to $89,094, commensurate with education and experience Benefits This position includes Commonwealth of Virginia and Christopher Newport University employee benefits. CNU offers a comprehensive benefits package to include retirement plans, medical, dental, vision, and a variety of other options. Available leave includes vacation, sick time, personal time, and volunteer/service leave. State employees are eligible for discounted travel, banking, legal and retail services, among others. To view more information about our benefits, visit Conditions of Employment This is a classified position. New and returning classified employees are required to complete a 12-month probationary period. Selected candidate must attend a 2-day New Employee Orientation Program. This position is designated as an on-campus position and requires regular in-person work at the university’s campus. Selected candidate must be able to perform their duties on campus during assigned work hours. This position is not eligible for full-time remote work, and requests to negotiate a fully remote arrangement will not be considered. Any telework opportunities are limited, subject to university policy and departmental approval, and may be modified or discontinued at any time. Telework Eligibility Yes Telework Eligibility Disclaimer This position is eligible for periodic telework as determined by the department. Eligibility is not guaranteed, and is subject to supervisor approval. Eligibility will depend on the likelihood of the employee’s success in a telework arrangement and the supervisor’s ability to manage telework. Departments and/or Human Resources may modify or revoke eligibility at any time. Employees will be required to sign a Telework Agreement. Physical Demands Light Lifting (less than 20 lbs.): Essential Moderate Lifting (20-50 lbs.): Essential Heavy Lifting (more than 50 lbs.): Marginal Pushing/Pulling: Essential Standing: Essential Sitting: Essential Bending: Non-Applicable Walking: Marginal Climbing: Non-Applicable Reaching: Non-Applicable Repetitive Motion: Non-Applicable Fast Pace: Essential Average Pace: Essential Multiple Priorities: Essential Intense Customer Interaction: Essential Multiple Stimuli: Essential Frequency Changes: Essential Memory: Essential Reasoning: Essential Hearing: Essential Reading: Essential Analyzing: Essential Logic: Essential Verbal Communication: Essential Written Communication: Essential Reasonable Accommodation Request Christopher Newport University (CNU) will make a reasonable effort to accommodate persons with disabilities in the application and/or interview process. Persons with disabilities who require accommodation should contact the CNU Human Resources Office by calling View phone number on click.appcast.io. EEO/Diversity Statement(s) Christopher Newport University, an EO Employer, is fully Committed to Access and Opportunity. Notice of Non-Discrimination & Title IX Policy Statement #J-18808-Ljbffr