Information Security Analyst II

Information Security Analyst II Florida Gulf Coast University Job Summary The Information Security Analyst II supports and strengthens theuniversity's information security program by implementing,monitoring, and improving controls that protect institutional data,systems, and infrastructure. This role administers securityconfigurations, investigates threats and incidents, conductsrisk-based access reviews, and ensures alignment with applicableregulatory requirements and security standards. The analystcollaborates across IT and academic units to integrate securitybest practices into daily operations, communicates securityrequirements to technical and non-technical audiences, and supportsongoing security awareness and continuous improvement. FGCU is building a culture of curiosity, commitment andcollaboration. We value employees who successfully work with othersand drive positive change through critical thinking and decisiveaction. If you thrive in an environment of innovation,accountability and mutual respect, you will find a good homehere. At Florida Gulf Coast University, employees are expected to work oncampus as part of a collaborative, mission-driven environment.While this role does not directly interact with students, itson-site presence is essential to supporting the university'soperations and advancing student learning across theinstitution. Job Description Typical duties include but are not limited to: Administers and maintains identity and access management (IAM)controls, including roles, permission sets, query and reportaccess, component interfaces, and automated process groups, inalignment with least-privilege principles. Designs and maintains security items such as roles, permissionlists, query and report access, component interfaces, and batchprocess groups. Detects, investigates, and resolves security events, policyviolations, and anomalous activity; documents findings andescalates incidents in accordance with the university's incidentresponse procedures. Identifies, reports, and resolves security violations. Manages user provisioning and de-provisioning workflows,evaluates access requests against established role definitions, andtroubleshoots authentication and authorization issues acrossenterprise platforms. Administers security aspects for users, identifies appropriatesecurity accesses, and troubleshoots security and accessissues. Partners with IT and academic units to assess security risks,drive process improvements, and ensure that security controls areeffectively integrated into operational workflows and projectdelivery. Collaborates with users to maintain and improve informationsecurity processes and procedures. Maintains accurate security documentation, including assetrecords, acceptable use guidance, network security standards, andevidence artifacts required for audit and compliance purposes. Maintains records, forms, and documents the proper use of thenetwork. Tracks and manages security-related work requests, incidents,and projects using the IT service management (ITSM) platform,ensuring timely resolution and accurate reporting. Completes tracking in the work order system. Conducts periodic access certification reviews and userentitlement audits to verify compliance with established securitystandards, FERPA, HIPAA, PCI-DSS, and other applicable regulatoryrequirements. Conducts access review audits to ensure compliance withestablished security standards and policy guidelines. Designs and implements data protection controls, includingencryption, data loss prevention (DLP) configurations, and securedata handling procedures to reduce exposure from unauthorizedaccess or exfiltration. Develops new techniques and procedures to protect data fromunauthorized users. Continuously evaluates security processes and tooleffectiveness; develops recommendations for control improvementsand promotes adoption of current security frameworks and industrybest practices. Reviews processes, evaluates results, recommends new processes,and promotes best practices. Identifies capability gaps in the university's securityposture, develops business cases for security investments, andleads or contributes to implementation projects that advanceinstitutional security objectives. Identifies the need for functionalities that enhance theorganization's security posture and manages projects to implementthese enhancements. Other Duties: Performs other job-related duties as assigned. Additional Job Description Required Qualifications: This position requires either seven years of directly relatedfull-time experience or, as an alternative, a Bachelor's degreefrom an accredited institution in computer science, businessadministration, or related field and three years of full-timeexperience directly related to the job functions. Professional full-time experience working with wide and localarea networks, business applications development and support,systems security, or related experience. Any appropriate combination of relevant education, experience,and/or certifications may be considered. Preferred Qualifications: Three years full time professional experience working with wideand local area networks or business applications development andsupport. Security specific certifications such as GIAC, CEH, orCISSP. Experience working with CIS Critical Controls or NIST 800series documents. Experience working in Higher Education. Knowledge, Skills & Abilities: Proven ability to think strategically and approach challengeswith creativity. Demonstrated track record of reliability, meeting goals, andholding oneself accountable. Strong interpersonal skills and experience working effectivelyacross teams. Knowledge of security strategies (operating system hardening,vulnerability management, change management, applicationtesting/patching, security tools, and software products).Knowledgeof modern security domains including endpoint and OS hardening,vulnerability and patch management, identity and access management,cloud security, application security testing, and security tooling(SIEM, EDR, DLP, IDS/IPS). Knowledge of network/system security access, management, andtesting. Knowledge of network and system security principles, includingsegmentation, access control architectures, zero trust concepts,and security testing methodologies. Knowledge of applicable security policies, best practices, andprinciples. Knowledge of standard computer logging processes andunderstanding of the types of events logged. Skill in identifying complex problems and reviewing relatedinformation to develop and evaluate options and implementsolutions. Excellent interpersonal skills. Advanced verbal and written communication skills and theability to present effectively to small and large groups. Ability to take initiative to plan, organize, coordinate andperform work in various situations when numerous and competingdemands are involved. Ability to collaborate and work effectively within thecommunity and willing to contribute to a team effort. Ability to work independently and follow through onassignments. Ability to translate security concepts to all areas of thebusiness.Ability to communicate security risk and technicalconcepts clearly to both technical and non-technical audiences,including faculty, senior leadership, and end users. Ability to interpret log data and investigate potentialissues.Ability to analyze SIEM alerts, log data, and securitytelemetry to identify indicators of compromise, anomalous behavior,or emerging threats, and triage findings for investigation orescalation. Ability to prepare network/system diagrams and advise on secureimplementations of systems and services.Ability to develop networkand system security architecture diagrams and provide guidance onsecure design principles, configuration baselines, and hardeningstandards for infrastructure and cloud environments. Ability to discern between security breaches and more innocenttechnical bugs.Ability to apply sound analytical judgment todifferentiate genuine security incidents from false positives,technical misconfigurations, or benign anomalies, reducing alertfatigue and improving response quality. Institutional Values & Behavioral Expectation: Seek out new approaches to improve outcomes; remain open forfeedback and new ideas. Lead with integrity; consistently produce high-quality work;persevere to overcome obstacles to meet deadlines and achievedeliverables. Share information and insights thoughtfully; build partnershipsacross departments; communicate respectfully; support colleagues toachieve common goals. Pay Grade 18 FGCU is a State University System of Florida member and an EqualOpportunity and Equal Access employer. All qualified applicantswill receive consideration for employment without regard to race,color, religion, sex, age, national origin, disability, orprotected veteran status. #J-18808-Ljbffr