Information Security Analyst (Analyst/Programmer - Expert) - Information Technology Services

Working Title

Information Security Analyst

SF State University

San Francisco State is an Equal Opportunity Employer and does not discriminate against persons on the basis of race, religion, color, ancestry, age, disability, genetic information, gender, gender identity, gender expression, marital status, medical condition, National origin, sex, sexual orientation, covered veteran status, or any other protected status.  Reasonable accommodations will be provided for qualified applicants with disabilities who self-disclose by contacting the Senior Human Resources Manager.

Applicants may visit titleix.sfsu.edu for more information on SF State's policy prohibiting discrimination, and how to file an online report using the procedures under Executive Order 1096 Revised. Inquiries can be directed to the campus Title IX Coordinator and Discrimination, Harassment, and Retaliation Administrator by calling (415) 338-2032 or emailing vpsaem@sfsu.edu.

San Francisco State is a 100% Smoke/Vapor-Free Campus.  Smoking or Vaping of any tobacco/plant-based substance is not permitted on any University properties.

The person holding this position may be considered a "mandated reporter" under the California Child Abuse and Neglect  Reporting Act and is required to comply with the requirements set forth in CSU Executive Order 1083 as a condition of employment.

This position may be a "designated position" in the California State University's Conflict of Interest Code.  The successful candidate accepting this position may be required to file Conflict of Interest forms subject to the regulations of the Fair Political Practices Commission.

Department

Information Security, Information Technology Services

Appointment Type

This is a one-year probationary position.

Time Base

Full-Time (1.0)

Work Schedule

Monday - Friday; 8:00am - 5:00pm

Anticipated Hiring Range

$9,167.00 - $10,000.00 Per Month ($110,004.00 - $120,000.00 Annually)

Salary is commensurate with experience.

Position Summary

The Information Security Analyst is an expert who understands the business processes and functional needs of Information Security. The incumbent reports to the SF State Information Security Officer, the Information Security Analyst is responsible for hands-on support of campus information security program initiatives from information security policy development and maintenance; awareness activities; developing and assessing IT architecture; assessing security products, documenting or conducting investigations, creating change requests, and coordinating with other campuses and the CO. Position requires expert knowledge of CSU and campus policy as well as reporting requirements.

Position Information

Risk assessment and management

• Conduct risk assessments 

• Review network, system, endpoint, and application security architecture for potential vulnerabilities 

• Review, test, and implement technology solutions for assessing and addressing vulnerabilities such as Multi factor authentication, password vaults, endpoint management, log analysis, and network intrusion appliances 

• Support campus-wide data classification assessments and security audits, track issues and manage remediation plans 

• Assist with the development and dissemination of campus-wide security policies and procedures 

• Provide support for vulnerability scanning application scanners to campus IT service providers 

• Provide support for network vulnerability scans 

Security incident preparation and response

• Assist with the development and dissemination of campus-wide information security incident response procedures 

• Conduct information security incident investigations including initial response, documentation and analysis 

• Log and track information security incidents 

• Support breach notification activities 

• Respond to spam, phishing, and copyright violation complaints 

• Analyze incidents to identify trends 

Security awareness, training, and compliance

• Review IT procurement agreements for information security compliance 

• Consult with campus departments to help them comply with applicable laws, regulations, CSU, and SF State policies 

• Recommend and develop awareness programs to enhance understanding of IT Security and its business risk 

• Oversee deployment and compliance of Skillsoft Security Awareness Training course 

• Maintain expert knowledge of SF State, and CSU, S