Lead, Information Security

Position: Advancement Lead, Information Security
** Department
* * ADV Business Application Management
** About the Department
** The Advancement Office engages alumni (~220k), current students, parents, and friends of the University through intellectual, professional and social activities on campus, around the world and online. Advancement raises $600 Million annually to support faculty and researchers, practitioners and patients, and students and programs across the University. Our work supports priorities in every division, school, department, and institute.
The Advancement Technology team delivers the data, systems, tools, and technology strategy that power UChicago Advancement’s ambitious fundraising and engagement goals. Taking an enterprise approach to data and systems, the team develops and supports systems and tools that are consistent, scalable, and adaptable. In close collaboration with stakeholders across Advancement and the broader University, Advancement Technology translates program strategies into innovative, integrated solutions that enable, enhance, and accelerate fundraising and engagement outcomes.

The team is committed to continuous innovation, centralized governance, and building partnerships that ensure technology investments are secure, future facing, and optimized for Advancement goals.
** Job Summary
** Under general supervision, serves as UChicago Advancement’s information technology security analyst and specialist. Applies in-depth expertise to design and govern security standards across applications, data, identities, collaboration platforms, and vendors, working with ITS Security and Advancement technology teams to implement controls, run access reviews, manage change control, and coordinate incident response and reporting. Supports risk measurement and security reporting, targeted training administration, and coordination of Legal/HR security processes as needed.
This role uses best practices and knowledge of to develop and implement information security and identity management solutions. Guides teams to deploy new technologies and manage existing security infrastructure as well as respond to cyber security incidents. Anticipates risks to the organization and leads security penetration testing and security awareness outreach.
** Responsibilities
* ** Uses a deep understanding of IT security expertise to develop and implement security and compliance policies, guidelines, and safe practices for Advancement-wide technology systems, run access reviews, manage change controls, coordinate incident response, and deliver security reporting across platforms.
* Leads in-depth IT risk assessments and security design for UChicago Advancement; sets and governs data and platform security standards; integrates security into the vendor/SaaS lifecycle and change control.
* Designs job-based roles and permission models, establishes the access-review cadence, and sets standards for onboarding, role changes, and offboarding with HR and IAM.
* Leads incident readiness and response across Advancement systems, maintains runbooks, coordinates incidents with ITS Security, captures evidence, and drives remediation to closure.
* Leads the security analytics and reporting function, including metrics, data sources and quality standards, dashboards, and the annual audit plan.
* Leads security training and enablement, delivers role-based training and quick guides, and manages enrollment, completion tracking, and reporting.
* Maintains Advancement security documentation and records; supports security operations with Legal and HR in coordination with ITS Security.
* Seeks opportunities for professional development that will enhance job performance including attending webinars, seminars, building networks within the University and with colleagues at peer institutions.
* Uses a deep understanding of IT expertise to develop and implement security and compliance policies, guidelines, and safe practices for university for university-wide computing and networking systems.
* Leads teams to conduct in-depth information technology risk assessments; makes recommendations and designs improvements to IT security procedures.
* Guides communications with users to…