Information Security Consultant, VRA Assessor; IT SCRTY ANL TX

Job Summary

#CA-PS Under the general direction of the Cyber Risk and Compliance Manager, the Information Security Consultant (ISC) manages security and data protection solutions that support the mission of the university and protect the confidentiality, integrity, and availability of information assets owned or entrusted to UC Davis. The ISC evaluates, and supports the documentation, validation, assessment, and accreditation processes necessary to assure that new and existing information technology (IT) systems and services meet the University's information assurance (IA) and security requirements.

The ISC prepares/maintains various security reports and dashboards, participates in security assessments and audit activities, prepares and reviews system security architecture designs, actively participates with business and campus units throughout the university community. The ISC tracks and reports on security risks and control effectiveness to the CISO and other campus stakeholders such as the Chief Information Officer, peers located on the Davis and Sacramento campuses as well as across the systems.

The ISC Serves as an example and a peer to others on the team and on campus for the purpose of peer-to-peer knowledge transfer, and to help develop a collaborative community of security professionals. The ISC must stay abreast of evolving campus needs, technology capabilities, and threat intelligence from a variety of sources to optimize data protection measures. The ISC will work with campus stakeholders to ensure data security needs and controls are aligned to support organizational goals and objectives and uses independent thinking to creatively solve problems and issues, makes independent decisions, and must maintain or preserve confidentiality when required to do so.

To be considered for this position, candidates must already have authorization to work in the United States. Unfortunately, we are unable to provide visa sponsorship at this time.

(In-State Only)

To see IET job postings, please visit (Use the "Apply for this Job" box below)./jobs

9/9/2026 at 11:59pm

• Bachelor's degree in related area or an equivalent experience/training
• Minimum of four years of experience reviewing and/or assessing information security reports, advisories, bulletins, or other relevant intelligence and conduct risk assessments.
• Experience using information assurance (IA) principles and organizational requirements that are relevant to condentiality, integrity, availability, authentication, and non-repudiation.
• Experience consulting with clients/customers.
• Experience working with information security frameworks and standards such as ISO, NIST and regulations related to information security such as PCI, HIPAA, FISMA, SB 1386, etc.
• Experience coordinating multiple simultaneous activities with strict deadlines, complex scheduling requirements while effectively organizing and managing time to achieve project goals and provide project status reports to clients and management.
• Strong proficiency with common productivity software such as Microsoft Visio and Excel.

• Information security certification (e.g., CRISC, CISSP, CISA, GIAC or PCI).
• Experience working in higher education.
• Experience working with and/or developing AI assisted risk assessments.
• Experience with conducting numerical risk analysis.
• Incident handling and forensics experience.
• Knowledge of network security architecture concepts, including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Knowledge of local specialized system requirements (e.g., critical infrastructure systems that may not use standard information technology [IT]) for safety, performance, and reliability.
• Knowledge of computer network defense (CND) and vulnerability assessment tools, including open-source tools, and their capabilities.
• Familiarity with IT supply chain security/risk management policies, requirements and procedures.
• Understanding of security requirements and strategies for "cloud hosted" environments.

• 50% - Risk Assessment
• 20% - Information Security Consulting
• 15% - Incident Response, Vulnerability, And Threat Management
• 15% - Documentation

The Information Security Office (ISO), a division of Information & Educational Technology (IET), helps protect the confidentiality, availability and integrity of UC Davis' information assets through consultation, services and programs. The ISO offers support, assistance, education and advice, manages certain security processes, and helps individuals and departments understand how they are responsible for information security at UC Davis as well as how to meet that responsibility.

• Salary or Pay Range: $/yr.
  
  - $/yr.

• Salary Frequency:
  Annual
• Salary Grade: STEPS
• UC
  
  Job Title:
  
  IT SCRTY ANL 4 TX
• UC Job Code: 006365
• Number of…