Information Security Analyst

Title: Information Security Analyst

Department Org: IT Personnel - 108790

Employee Classification: J1 - Salaried Full Time HSC

Bargaining Unit: Professional Staff Association

Primary Location: HSC H

Shift:  1

Start Time:  8:00 a.m.   End Time:  5:00 p.m.

Posted Salary: commensurate with education and experience

Float: No

Rotate: Yes

On Call: Yes

Travel: No

Weekend/Holiday: No

Job Description:

The Information Security Analyst, under the direction of UT’s Information Security Officer, is charged with protecting the University of Toledo’s data and technology assets. The incumbent will provide general security expertise to the institution across all security domains and is expected to backfill/cross-train with other staff to gain and maintain a diverse security skill set. The incumbent must maintain a broad-based understanding of technology and is expected to have significant depth in one or more specific technologies or technical disciplines. Beyond general security and technology expertise, the incumbent will serve as the lead information security analyst and subject matter expert for assigned security work in his/her subject matter domain.

Under guidance of the UT Information Security Officer, the Security Analyst will perform project “build” activities and/or security operations “run” tasks as need dictates. The incumbent must stay abreast of current security threats and vulnerabilities and methods to counter or mitigate them. S/he will serve as a security team liaison to internal and external projects and organizations and provide security advising and consulting services. The incumbent will use knowledge and experience working with technology to assess and measure the institution’s cyber risk. The incumbent will also plan, implement, and maintain enhancements to the institution’s security controls to ensure that the overall security program is carried out. From time to time, the analyst will be asked to perform customer service, training, and awareness duties to develop and foster a safe computing culture. In completing assigned work, the security analyst will be expected to act with integrity, agility and responsiveness, and be able to complete assigned work with a high degree of quality.

Minimum Qualifications:

• Bachelor’s Degree or equivalent experience, in Computer Science, Information Systems, Information Technology, Cybersecurity, or a related field is required.
• Technical and/or Information Security certification desired such as CEH, CCNA, MCSE, CNE, CISSP, GSEC, GIAC, Security+ etc. Other relevant certifications such as CIPP, CISA, CISM, CRISC, or other risk management, privacy or IT Audit certifications helpful. Security+ or equivalent certification required within 6 months of hire.
• 3-6 years’ experience in maintaining the confidentiality, integrity, or availability of information systems, servers or networks required. Completed degree in a relevant field in lieu of up to 2 years’ work experience will be considered; qualified candidates must possess at least 1 year of relevant employment experience.
• Government/military, healthcare, academic, enterprise IT, telecom, security, IT audit, or privacy work experience preferred.
• Experience in a large enterprise environment desired.
• Significant expertise in at least one IT or relevant technical discipline (e.g. Software Development, Networking, System Administration, etc.) required.
• Experience in maintaining the confidentiality, integrity, or availability of information systems, servers or networks required.
• Experience designing, deploying, operating, maintaining, and using information security technologies such as vulnerability management tools, firewalls, IDS/IPS, VPN, log management systems, SIEM, authentication services, ACL, NAC, pen testing tools, security policy enforcement, etc. desired. Expert-level knowledge of at least one security tool or process desired.
• Experience writing high quality documentation, policies, procedures, technical guides or manuals preferred and a basic understanding of contracts and audit reports is helpful.
Communication and other skills:
• Behavioral dimensions considered necessary include: strong interpersonal skills; conflict resolution, creative problem solving capability; and customer service.
Other:
• Ability to work on a 24x7 on-call basis
• Willingness to operate on a scheduled shift other than 8x5

 

Conditions of Employment:

To promote the highest levels of health