Information Technology Security Analyst Senior, Penn Dental Medicine

University Overview

The University of Pennsylvania, the largest private employer in Philadelphia, is a world-renowned leader in education, research, and innovation. This historic, Ivy League school consistently ranks among the top 10 universities in the annual U.S. News & World Report survey. Penn has 12 highly-regarded schools that provide opportunities for undergraduate, graduate and continuing education, all influenced by Penn’s distinctive interdisciplinary approach to scholarship and learning. As an employer Penn has been ranked nationally on many occasions with the most recent award from Forbes who named Penn one of America’s Best Large Employers in 2023.

Penn offers a unique working environment within the city of Philadelphia. The University is situated on a beautiful urban campus, with easy access to a range of educational, cultural, and recreational activities. With its historical significance and landmarks, lively cultural offerings, and wide variety of atmospheres, Philadelphia is the perfect place to call home for work and play.

The University offers a competitive benefits package that includes excellent healthcare and tuition benefits for employees and their families, generous retirement benefits, a wide variety of professional development opportunities, supportive work and family benefits, a wealth of health and wellness programs and resources, and much more.

Posted Job Title

Information Technology Security Analyst Senior, Penn Dental Medicine

Job Profile Title

Job Description Summary

As a member of Penn Dental Medicine's (PDM) IT team - plan, design, enforce and audit security policies and procedures which safeguard the integrity of and access to university systems. Manage security improvement projects; maintain knowledge of changing information security threats and technologies; provide recommendations for adaptation of new technologies, procedures, or policies; investigate security incidents; perform computer forensics studies and maintain incident tracking records. Prepare status reports on security matters; develop security risk analyses; keep management informed of risks and critical issues that might impact PDM/University security objectives.

Job Description

Job Duties:

• Administration of security toolsets for both on-premise and public-cloud resources; active monitoring of vulnerability scans; assist in working with peers and/or security vendors in defining the scope of internal/external vulnerability scans and penetration tests. Performs periodic reviews of security policies and procedures; conducts comprehensive risk assessments of various security controls. 

• Serve as a resource person in assessing systems, processes, and projects against compliance requirements, control objectives, and security best practices; interacts with internal and external technical staff and consults with project teams at various stages of project life cycles. Assists in the evaluation of hardware and software products to ensure compliance to information security policies can be adhered to. 

• Monitor and analyze systems and network operations for signs of suspicious or detrimental activity. Investigate information security incidents to determine the cause and extent of the incident, remediate security risks, and to make recommendations to mitigate the likelihood of similar future incidents.

• Implement strategic security initiatives and maintain effective Information Security Program for PDM in alignment with University. Identify and provide oversight and direction for critical processes in support of Information Security services.

• Regularly review audit reports and oversight of processes, procedures, and tools used to ensure security controls. Create specific protocols to proactively assess potential areas of risk/vulnerability in PDM technology assets. 

• Maintain knowledge of evolving IT security issues, as well as legal, ethical, and social issues related to the operation and use of networked information systems within an education/research/healthcare environment. Participate in security-based trainings and activities/campaigns (including Cybersecurity Awareness month), aimed at educating PDM students, f