Security and Access Management Analyst

The Security and Access Management Analyst is responsible for application of policies, programs, standards, and compliance of information security, access, and privacy.  Primary responsibility will be in the maintenance and monitoring of information security policies for both physical and electronic access to information.  The role is key to ensuring that information and infrastructure will be protected from internal and external threats, and that the University is compliant with federal, state, and local laws and regulatory requirements for information security, access, and privacy.  This position will also ensure that information created, acquired, stored, transmitted, and maintained by the University is in accordance with intended purposes and access to information is limited to authorized users with a justifiable business need that enable the effective and efficient operations of the University.

DISTINGUISHING CHARACTERISTICS:          

• Familiarity with and a comprehension the layers of security.
• Modern application / tools for authentication and role-based access.
• Interest and capacity for understanding and evaluating complex scenarios
• Ability to consume large amounts information as technologies and cyber risks change

ESSENTIAL DUTIES:

• Maintain and recommend improvements to central authorization processes and documentation for electronic interfaces, scheduling and exchange of information between various University and vendor systems.
• Maintain and recommend improvements to central authorization processes and protocols for user identification, accounts, security, and access privileges.
• Maintain and recommend improvements to security policies, standards, and guidelines working with University constituents, data owners, and governance groups.
• Develop and maintain information security policies and procedures for network security, access.
• Analyze and prepare Incident Response Plans and Procedures for review to address security incidents, policy violations, and breaches.
• Participate in the identification, testing and implementation of security monitoring tools and technologies, including AI enabled capability.
• Perform ongoing security monitoring and assessment.
• Develop and maintain user system security; monitor and oversee user security privileges, system administration, interfaces, and access.
• Review internal IT operations for security risks and vulnerabilities.
• Monitor information security trends and keeping management informed about information security-related issues.
• Work with outside consultants as assigned for independent security audits.
• Evaluate system vulnerability and recommend security improvements.
• Assist in preparing and conducting security orientation and security awareness programs.
• To constantly learn and contribute in new ways or as assigned.

REQUIRED KNOWLEDGE, SKILL AND ABILITIES:         

• Familiarity with network, server, and storage technologies, standard protocols, and related applications to understand security implications.
• Knowledge to automate tasks and procedures and ability to extract and work with data fluidly to assess what it is telling us.
• Ability to perform analysis to meet client needs in solving security or access problems across the University.
• Knowledge of latest security, access, and privacy legislation, regulations, and alerts impacting the University networks, systems and information architecture.
• Excellent verbal and written communication skills.
• Excellent organization and problem-solving s