Information Security Professional

Position Number

012583

Information Security Professional

We are seeking a highly skilled Security Architect with 5 to 7+ years of experience and expertise in cloud security, vulnerability management, BC/DR, and AI governance. The ideal candidate will drive innovation while ensuring operational resilience, compliance, and effective risk mitigation across on‑prem and hybrid cloud environments. This position contributes to the division’s role of ensuring university compliance with federal and state laws and regulation, serving as the advisory and support resource for HIPAA Security Rule, FERPA and DMCA compliance, records management, and compliance with restricted data laws and policies – such as PII, ePHI, and educational information.

• A Bachelor’s or Master’s degree in a technical field with at least 5 to 7 years of relevant experience, or equivalent combination of education/experience
• Certifications such as CISSP, CRISC, CCSP, Microsoft Certified:
  Security, Compliance, and Identity Fundamentals, or equivalent
• Azure/AWS/AI Certifications
• Proven experience in security architecture and AI governance
• Expertise in Microsoft security tools (Azure Security, Defender Suite, Purview, Sentinel)
• Proficient in scripting languages for automation (Power Shell, Python, Bash)
• Familiarity with compliance frameworks like NIST, ISO 27001/2, HIPAA, and AI governance standards
• Strong analytical, communication, and collaboration skills

• Conduct security architecture reviews, risk assessments, threat modeling, and cloud configuration audits (Azure & AWS)
• Collaborate with AI/ML teams to identify and mitigate risks related to AI, including data privacy, model security, and adversarial threats
• Develop and implement robust security frameworks, focusing on IAM & Data Security, Cloud & Network Security
• Monitor and optimize security posture using Microsoft Azure tools (Defender for Cloud, Sentinel, Azure AD) and the Microsoft Defender Suite (Endpoint, Identity, Office 365, Cloud Apps)
• Secure AI/ML models and data pipelines while addressing governance risks
• Design and implement advanced DLP policies via Microsoft Purview
• Ensure compliance with NIST and ISO frameworks, CIS controls, HIPAA, AI governance standards (ISO 42001/23894) and data protection regulations
• Execute incident response using SIEM/SOAR platforms with automation where applicable
• Perform vulnerability assessments across hybrid environments and ensure timely remediation and patch management coordination
• Develop and maintain comprehensive BC/DR plans, conducting annual exercises for continuous improvement
• Conduct business impact analyses to prioritize remediation strategies
• Build dashboards and custom security reports using Splunk, Power BI, Microsoft Sentinel, or equivalent
• Automate repetitive security tasks using scripting languages (Power Shell, Python, Bash)
• Conduct DLP policy enforcement, AI security education, and annual security awareness training
• Stay ahead of emerging threats and regulatory developments in cloud, data, and AI security domains

Salary commensurate with experience. FTE 1.000. Permanent appointment. Open until filled.