Information Security Analyst

Special Instructions

Dear Applicant,

The South Texas College Office of Human Resources will not be held responsible for redacting any confidential or sensitive information from the documents that you attach to your application. Confidential and sensitive information include the following:

• Social Security Number
• Date of Birth
• Age
• Citizenship Status
• Gender
• Ethnicity/Race
• Marital Status
• Applicant Photos
   

* A redaction guide can be found by clicking here.

Please make sure that you omit this information from your application prior to submission. We are advising you that the Office of Human Resources will be forwarding your application to the hiring department as per your submission.

Transcripts
Transcripts must be from an institution accredited by an accrediting agency recognized by the U.S. Department of Education or the Council for Higher Education Accreditation (CHEA).

Foreign transcripts
Applicants submitting employment applications with foreign transcripts must provide transcript equivalency documentation from an approved evaluation service. The evaluation service must be a member of the National Association of Credential Evaluation Services (NACES). The evaluation service links on the following site are provided by South Texas College for your convenience but are not affiliated with South Texas College: NACES Members

Job Description

Department: Information Security

General Statement of Job

The Information Security (InfoSec) Analyst performs technical security control management, in addition to risk management tasks as part of the InfoSec program. Collaborates with other Information Technology (I.T.) technical teams and the InfoSec staff to implement and maintain InfoSec controls.

Specific Duties and Responsibilities

Essential Functions:

• Enforce InfoSec/ I.T. resource standards, guidelines, procedures, and compliance requirements.
• Collaborate and consult with I.T. technical teams for the development, coordination, and implementation of the InfoSec program practices such as: patch management, mobile device management, application security, database security, endpoint security and other security controls.
• Collaborate with fellow members of the InfoSec team for the further development and maturation of the InfoSec Program.
• Participate in all parts of the Risk Management Framework Lifecycle.
• Implement, administrate, and monitor technical security controls to include: vulnerability scans, Intrusion Detection/ Intrusion Prevention Systems (IDS/IPS) monitoring, Security Incident Event Manager (SIEM) monitoring, endpoint protection and monitoring, and firewall rules.
• Assist in conduction of InfoSec and Cybersecurity audits.
• Assist in training the faculty, staff, and students in areas of InfoSec and Cybersecurity.
• Will act as an InfoSec Point of Contact outside of normal business hours, and will perform job duties in an on-call capacity.
• Performs other duties as assigned.

Required Education and Experience

• Bachelor’s Degree in Cybersecurity or IT Management or a related field required.
• At least three (3) years of progressive experience in computer administration and/or InfoSec, including experience with enterprise servers, networking devices, and web applications required.
• Experience administrating in an enterprise environment or higher education institution, preferred.

Required Knowledge, Skills and Abilities

• Excellent oral, written, presentation, and interpersonal communication skills.
• Strong computer skills with knowledge of Microsoft Office including, but not limited to, Word, Excel, PowerPoint, and Outlook, the Windows environment, and internet research skills.
• Knowledge of security policy development, security education, and network penetration testing.
• Knowledge of information security standards and regulations (e.g. CIS Security Benchmarks, NIST 800-series publications, ISO 17799/27002, FERPA, Texas Identity Theft Prevention, etc.).
• Strong analytical, critical thinking, and problem-solving skills and the ability to exercise discretion and independent judgment.
• Ability to prioritize, organize, and complete multiple tasks with attention to detail, within stated deadlines.
• Ability to work independently as well as a team player within department and with othe