Information Security Analyst

Info Sec Analyst III (Inst)

The Risk Management and Compliance (RMC) team within the Office of Cybersecurity is looking for an experienced risk analyst to address internal security review requests from UW‑Madison campus partners. The role focuses on evaluating system use and data classification, collaborating with the Office of Compliance on privacy risks, and presenting those risks and improvement opportunities to campus stakeholders. The analyst will also support the establishment and maintenance of an RMC project management tool and gather feedback for service improvement.

• Assist in the design, development, and implementation of security methodology and infrastructure for major systems.
• Conduct vulnerability‑scanning analysis, test security controls, document risk assessment results, and design procedures to prevent future incidents.
• Develop and document an RMC project management tool, including processes and workflows.
• Act as a liaison with campus IT practitioners to gather needs and feedback, ensuring RMC efficiency.
• Configure, develop, and test applications and security controls.

• Established professional experience conducting risk assessments against recognized standards (NIST, COBIT, or ISO) with minimal oversight.
• Experience working with security requirements within a healthcare, higher‑ed, or research organization.
• Working knowledge of NIST, HIPAA, artificial intelligence, and cloud computing services.
• Current professional certification in information security or IT audits.
• Project‑management experience, including setting expectations, communicating across all organizational levels, and leading a team.
• Ability to work independently on technical investigations, producing detailed written reports and presentations.

• Experience assessing vendors during procurement and implementation stages.
• Proficiency with standard industry applications for compliance reporting (e.g., office productivity and project‑management software).
• Expertise using vulnerability‑management tools to analyze discovered vulnerabilities against current configurations.
• Experience serving as both a lead and contributing team member on projects.
• Knowledge of enterprise project‑management tools, such as JIRA.

Bachelor’s degree required; preferred degree preferred minimum.

Salaries range from $99,000 to $117,000 based on experience and qualifications. Benefits include generous vacation, holidays, sick leave, competitive insurance and savings plans, and retirement benefits.

Qualified applicants will receive consideration for employment without regard to, including but not limited to, race, color, religion, sex, sexual orientation, national origin, age, pregnancy, disability, or status as a protected veteran, and other bases as defined by federal regulations and UW System policies. Employment may require a criminal background check and may involve reference checks concerning misconduct. The University of Wisconsin System will not reveal the identities of applicants who request confidentiality in writing, except that the identity of the successful candidate will be released.