Information Security Analyst II

Florida Gulf Coast University

The Information Security Analyst II supports and strengthens the university's information security program by implementing,monitoring, and improving controls that protect institutional data,systems, and infrastructure. This role administers security configurations, investigates threats and incidents, conductsrisk-based access reviews, and ensures alignment with applicable regulatory requirements and security standards. The analystcollaborates across IT and academic units to integrate security best practices into daily operations, communicates security requirements to technical and non-technical audiences, and supportsongoing security awareness and continuous improvement.

FGCU is building a culture of curiosity, commitment and collaboration. We value employees who successfully work with othersand drive positive change through critical thinking and decisive action. If you thrive in an environment of innovation,accountability and mutual respect, you will find a good homehere.

At Florida Gulf Coast University, employees are expected to work oncampus as part of a collaborative, mission-driven environment.

While this role does not directly interact with students, itson-site presence is essential to supporting the university'soperations and advancing student learning across the institution.

• Administers and maintains identity and access management (IAM) controls, including roles, permission sets, query and reportaccess, component interfaces, and automated process groups, in alignment with least-privilege principles.
• Designs and maintains security items such as roles, permissionlists, query and report access, component interfaces, and batchprocess groups.
• Detects, investigates, and resolves security events, policy violations, and anomalous activity; documents findings and escalates incidents in accordance with the university's incident response procedures.
• Identifies, reports, and resolves security violations.
• Manages user provisioning and de-provisioning workflows,evaluates access requests against established role definitions, and troubleshoots authentication and authorization issues across enterprise platforms.
• Administers security aspects for users, identifies appropriate security accesses, and troubleshoots security and access issues.
• Partners with IT and academic units to assess security risks,drive process improvements, and ensure that security controls are effectively integrated into operational workflows and project delivery.
• Collaborates with users to maintain and improve information security processes and procedures.
• Maintains accurate security documentation, including asset records, acceptable use guidance, network security standards, and evidence artifacts required for audit and compliance purposes.
• Maintains records, forms, and documents the proper use of the network.
• Tracks and manages security-related work requests, incidents,and projects using the IT service management (ITSM) platform,ensuring timely resolution and accurate reporting.
• Completes tracking in the work order system.
• Conducts periodic access certification reviews and userentitlement audits to verify compliance with established security standards, FERPA, HIPAA, PCI-DSS, and other applicable regulatory requirements.
• Conducts access review audits to ensure compliance with established security standards and policy guidelines.
• Designs and implements data protection controls, includingencryption, data loss prevention (DLP) configurations, and secure data handling procedures to reduce exposure from unauthorizedaccess or exfiltration.
• Develops new techniques and procedures to protect data fromunauthorized users.
• Continuously evaluates security processes and tooleffectiveness; develops recommendations for control improvements and promotes adoption of current security frameworks and industry best practices.
• Reviews processes, evaluates results, recommends new processes,and promotes best practices.
• Identifies capability gaps in the university's security posture, develops business cases for security investments, andleads or contributes to implementation projects that advanceinstitutional security objectives.
• Identifies the need for functionalities that enhance the organization's security posture and manages projects to implementthese enhancements.

• Performs other job-related duties as assigned.

• This position requires…