Information Security Assessment and Analysis Team Lead

Information Security Assessment and Analysis Team Lead

Search #: 499811
Work type: Full-time
Location: UConn Storrs
Categories: Information Technology

Under the general direction of the Chief Information Security Officer, the Information Security Assessment and Analysis Team Lead is responsible for leading the University's Security Assessment and Security Analysis programs in support of the University of Connecticut Information Security Office.

The Information Security Assessment and Analysis Team Lead works regularly with other senior members of the Information Security Office and serves as a member of the CISO's senior leadership team.

This position serves in a dual capacity as both a technical subject matter expert and the supervisor of a functional team. The incumbent provides strategic and operational leadership for the University's security assessment; vulnerability management; cyber security program reviews; governance, risk, and compliance; vendor risk management; and data security programs while actively participating in complex security assessments, technical reviews, and enterprise risk analysis.

This position currently has three direct FTE reports, with team growth envisioned, as well as oversight of student workers.

The Security Assessment and Analysis Team Lead manages a multidisciplinary team of cybersecurity professionals responsible for Vulnerability Management;
Security Policy, Risk, and Compliance;
Application and Systems Security;
Data Security;
Third-Party Risk Management; and Security Assessments. The function and nature of the team is expected to evolve and keep pace with the changing technology and threat landscape. The team is designed to grow over time to include Cloud Security and Artificial Intelligence Security functions.

The Team Lead establishes strategic direction, operational priorities, standards, assessment methodologies, and technical guidance that improve the University's overall security posture across academic, research, and administrative environments.

The Team Lead collaborates closely with University leadership, Information Technology Services, Enterprise Applications, Research IT, Enterprise Infrastructure, Counsel, Compliance, Privacy, Internal Audit, Procurement, Research Compliance, and other stakeholders to integrate cybersecurity risk management throughout the institution.

The Security Assessment and Analysis Team Lead is responsible for continuously improving the University's cybersecurity maturity through comprehensive security assessments, governance, risk management, vulnerability management, technical standards development, and staff development.

• Information Security Assessment and Analysis Team Lead (Information Technology Team Lead 2 – UCP
  7): $95,066 to $123,585

Note:

All minimum qualifications must be met to be eligible for consideration. Salary will be commensurate with experience within the established range.

• Defined contribution with employer match or defined benefit program retirement options
• Excellent and affordable healthcare options
• 22 paid vacation days per year
• Paid sick leave
• 13 paid holidays
• Employee and dependent tuition waiver programs
• A highly desirable work environment and work-life balance

• Lead the University's Information Security Assessment and Security Analysis programs under the oversight of the Chief Information Security Officer.
• Direct day-to-day operations of the Information Security Assessment and Analysis Team, including prioritization of work, workload management, coaching, mentoring, performance management, and career development.
• Develop strategic roadmaps for security assessment, governance, risk management, vulnerability management, application security, data security, and third-party risk.
• Serve as the University's senior technical authority for security assessment methodologies and cybersecurity risk analysis.
• Participate as a member of the CISO's senior leadership team in establishing strategic direction for the Information Security Office.
• Develop staffing plans and future organizational capabilities, including expansion into…