Information Security Specialist (Remote)

Do you have a passion for children and education? Would you like to positively impact families in need of help? We want to speak with you!

Step Up For Students empowers families to pursue and engage in the most appropriate learning options for their children.


Step Up For Students empowers families to pursue the most appropriate learning options for their children. We unite communities to provide scholarships that open doors to a stronger future. With this support, students can choose the right learning environment and access resources to reach their full potential.

Our culture is rooted in two core values:
• Everyone is an asset
• Every event is an improvement opportunity

These values guide how we work together and continuously improve. We expect every team member to bring these principles to life in their daily work.

This role partners closely with the Director of Information Security and cross functional leaders across the organization to help advance and strengthen Step Up For Students’ information security and privacy program. The Specialist, Information Security plays a hands on role in supporting security initiatives, contributing to meaningful projects, and helping protect the organization’s systems, data, and mission. This position offers the opportunity to collaborate with diverse teams, gain exposure to enterprise level security practices, and make a direct impact on safeguarding information that supports families and students nationwide.

Location: Remote (United States)

Key Responsibilities:
• Support and administer the implementation of security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information.
• Protect systems by defining access privileges, control structures, and resources.
• Implement security improvements by assessing the current security environment, evaluating trends, and anticipating requirements.
• Perform initial and periodic privacy and security risk assessments and conduct ongoing monitoring activities in coordination with the organization’s other compliance and audit functions.
• Evaluate new products, information systems, architectures for compliance with company security policies.
• Evaluate new products, information systems, architectures for compliance with company security policies.
• Track efficiencies of security controls implemented in support of the organization’s security objectives. Assist in access reviews to ensure privacy principles are applied to applications, networks, and other areas that are defined or within audit scope.
• Assist in access reviews to ensure privacy principles are applied to applications, networks, and other areas that are defined or within audit scope.
• Assist in reviewing vulnerability reports, app scan findings, IDS/IPS logs, and log monitoring applications to identify and prioritize findings and escalate unusual activity.
• Evaluate the impact of technical and business changes and re-engineering efforts, and all system development projects relevant to information security & privacy controls.
• Assist with external audits including all related compliance/audit issues, corrective action plans, process control manuals, and documentation. This includes direct interaction with any 3rd party providers.
• Review violations of computer security and data privacy practices and discuss security procedures to ensure violations are not repeated.
• Assist and promote activities to foster privacy and security awareness and compliance within the organization.
• Assist in development and support of organization-wide privacy policies and procedures, including without limitation to: Security standards Security processes Vulnerability assessments and reports Recordkeeping and administrative requirements Support for security compliance activities
Qualifications:
• Demonstrated success and a proven track record in professional/life experience in specific job functions, projects, or industries. Military service can substitute for professional experience and/or formal education requirements.
• This position requires 3-5 years of experience working in a computer science related field. Recognized security related certificate (Security+, SSCP, CCSP, etc.) Degree or equivalent work experience in a computer science/security related discipline.
• Familiarity with application security, database technologies used to store enterprise information, directory services, and information systems auditing.
• Experience working with information and network security practices, software, and hardware.
• Understanding of business/technology controls to manage confidential data throughout its lifecycle.

You’ll Stand Out If You Have:
• Active and in