Information Security Analyst II

## Information Security Analyst IIApplylocations:
Main Campus time type:
Full time posted on:
Posted 2 Days Agojob requisition :
R0007487
** Job Summary
** The Information Security Analyst II supports and strengthens the university’s information security program by implementing, monitoring, and improving controls that protect institutional data, systems, and infrastructure. This role administers security configurations, investigates threats and incidents, conducts risk-based access reviews, and ensures alignment with applicable regulatory requirements and security standards. The analyst collaborates across IT and academic units to integrate security best practices into daily operations, communicates security requirements to technical and non-technical audiences, and supports ongoing security awareness and continuous improvement.
FGCU is building a culture of curiosity, commitment and collaboration. We value employees who successfully work with others and drive positive change through critical thinking and decisive action. If you thrive in an environment of innovation, accountability and mutual respect, you will find a good home here.
** Job Description
**** Typical duties include but are not limited to:
*** Administers and maintains identity and access management (IAM) controls, including roles, permission sets, query and report access, component interfaces, and automated process groups, in alignment with least-privilege principles.
* Designs and maintains security items such as roles, permission lists, query and report access, component interfaces, and batch process groups.
* Detects, investigates, and resolves security events, policy violations, and anomalous activity; documents findings and escalates incidents in accordance with the university’s incident response procedures.
* Identifies, reports, and resolves security violations.
* Manages user provisioning and de-provisioning workflows, evaluates access requests against established role definitions, and troubleshoots authentication and authorization issues across enterprise platforms.
* Administers security aspects for users, identifies appropriate security accesses, and troubleshoots security and access issues.
* Partners with IT and academic units to assess security risks, drive process improvements, and ensure that security controls are effectively integrated into operational workflows and project delivery.
* Collaborates with users to maintain and improve information security processes and procedures.
* Maintains accurate security documentation, including asset records, acceptable use guidance, network security standards, and evidence artifacts required for audit and compliance purposes.
* Maintains records, forms, and documents the proper use of the network.
* Tracks and manages security-related work requests, incidents, and projects using the IT service management (ITSM) platform, ensuring timely resolution and accurate reporting.
* Completes tracking in the work order system.
* Conducts periodic access certification reviews and user entitlement audits to verify compliance with established security standards, FERPA, HIPAA, PCI-DSS, and other applicable regulatory requirements.
* Conducts access review audits to ensure compliance with established security standards and policy guidelines.
* Designs and implements data protection controls, including encryption, data loss prevention (DLP) configurations, and secure data handling procedures to reduce exposure from unauthorized access or exfiltration.
* Develops new techniques and procedures to protect data from unauthorized users.
* Continuously evaluates security processes and tool effectiveness; develops recommendations for control improvements and promotes adoption of current security frameworks and industry best practices.
* Reviews processes, evaluates results, recommends new processes, and promotes best practices.
* Identifies capability gaps in the university’s security posture, develops business cases for security investments, and leads or contributes to implementation projects that advance institutional security objectives.
* Identifies the need for functionalities that enhance the organization's…