Information Security Consultant, VRA Assessor; IT SCRTY ANL TX

#CA-PS

Under the general direction of the Cyber Risk and Compliance Manager, the Information Security Consultant (ISC) manages security and data protection solutions that support the mission of the university and protect the confidentiality, integrity, and availability of information assets owned or entrusted to UC Davis. The ISC evaluates, and supports the documentation, validation, assessment, and accreditation processes necessary to assure that new and existing information technology (IT) systems and services meet the University's information assurance (IA) and security requirements.

The ISC prepares/maintains various security reports and dashboards, participates in security assessments and audit activities, prepares and reviews system security architecture designs, actively participates with business and campus units throughout the university community. The ISC tracks and reports on security risks and control effectiveness to the CISO and other campus stakeholders such as the Chief Information Officer, peers located on the Davis and Sacramento campuses as well as across the systems.

The ISC Serves as an example and a peer to others on the team and on campus for the purpose of peer-to-peer knowledge transfer, and to help develop a collaborative community of security professionals. The ISC must stay abreast of evolving campus needs, technology capabilities, and threat intelligence from a variety of sources to optimize data protection measures. The ISC will work with campus stakeholders to ensure data security needs and controls are aligned to support organizational goals and objectives and uses independent thinking to creatively solve problems and issues, makes independent decisions, and must maintain or preserve confidentiality when required to do so.

Under the general direction of the Cyber Risk and Compliance Manager, the Information Security Consultant (ISC) manages security and data protection solutions that support the mission of the university and protect the confidentiality, integrity, and availability of information assets owned or entrusted to UC Davis. The ISC evaluates, and supports the documentation, validation, assessment, and accreditation processes necessary to assure that new and existing information technology (IT) systems and services meet the University's information assurance (IA) and security requirements.

The ISC prepares/maintains various security reports and dashboards, participates in security assessments and audit activities, prepares and reviews system security architecture designs, actively participates with business and campus units throughout the university community. The ISC tracks and reports on security risks and control effectiveness to the CISO and other campus stakeholders such as the Chief Information Officer, peers located on the Davis and Sacramento campuses as well as across the systems.

The ISC Serves as an example and a peer to others on the team and on campus for the purpose of peer-to-peer knowledge transfer, and to help develop a collaborative community of security professionals. The ISC must stay abreast of evolving campus needs, technology capabilities, and threat intelligence from a variety of sources to optimize data protection measures. The ISC will work with campus stakeholders to ensure data security needs and controls are aligned to support organizational goals and objectives and uses independent thinking to creatively solve problems and issues, makes independent decisions, and must maintain or preserve confidentiality when required to do so.

To be considered for this position, candidates must already have authorization to work in the United States. Unfortunately, we are unable to provide visa sponsorship at this time. (In-State Only)

9/9/2026 at 11:59pm

• Bachelor's degree in related area or an equivalent experience/training
• Minimum of four years of experience reviewing and/or assessing information security reports, advisories, bulletins, or other relevant intelligence and conduct risk assessments.
• Experience using information assurance (IA) principles and organizational requirements that are relevant to confidentiality, integrity, availability, authentication, and non-repudiation.
• Experience consulting with clients/customers.
• Experience working with information security frameworks and standards such as ISO, NIST and regulations related to information security such as PCI, HIPAA, FISMA, SB 1386, etc.
• Experience coordinating multiple simultaneous activities with strict deadlines, complex scheduling requirements while effectively organizing and managing time to achieve project goals and provide project status reports to clients and management.
• Strong proficiency with common productivity software such as Microsoft Visio and Excel.

• Information security…