Information Security Operations Engineer

Information Security Operations Engineer

The role of the Information Security Operations Engineer is to drive the implementation of security strategy, identify and mitigate emerging threats and vulnerabilities, and provide protection for our organization’s interests. You will align security and technology solutions with business objectives. Collaborate with and inform members of the campus’ information security program, including developing and implementing security standards, conducting risk assessments, and gathering and reporting on security performance metrics.

As a member of the OIT department this position strives to ensure consistency in communications, actions, and alignment to the strategic plan of the university. This position is also responsible for supporting the mission of the university by delivering technology, services, solutions and guidance to the students, faculty, staff, and the community in a professional, exemplary, service oriented collaborative manner.

• Responsible for daily oversight of the University’s security posture ensuring the security and integrity of the University’s IT infrastructure.
• Proactive monitoring and mitigation of security threats and vulnerabilities within the University’s enterprise infrastructure, endpoints and applications.
• Coordination with the Information Security Leadership and report on technical aspects of security and identity management.
• Responsible for vendor oversight to comply with university security compliance standards and service-level agreements.
• Coordinate with change management, incident management and knowledge management to ensure consideration of security controls and testing procedures.
• Compliance oversight of information security and identity and access management governance processes.

• Develop a Sec Ops program of security and identity, addressing risks and business requirements.
• Coordination with state programs and agencies for information security oversight.
• Integrate new technologies and automation to ensure agility and security.
• Define metrics and reporting strategies to measure progress and identify optimization opportunities in the security and identity program.

• Monitor and report on compliance with security policies and enforce policies within the University.
• Propose changes to existing policies and procedures for operational efficiency and regulatory compliance.

• Assist resource owners and IT staff in understanding and responding to audit risks.
• Provide University communication, awareness, and education.
• Oversight of security controls within contracts and service-level agreements with vendors and internal departments.

• Consult with IT and University staff to incorporate security and identity management into hardware, application, and software evaluation, selection, installation, and configuration.
• Recommend and coordinate the implementation of technical controls to enforce policies.

All Information Technology staff – regardless of their unique position – are expected to perform their assigned duties in a manner consistent with professional standards, with full awareness of responsibilities toward managing personal and institutional data, with priority regard to delivering customer service, with an understanding of the 24/7 nature of IT and the responsibilities that create for them as individuals, and in a constructive and effective collaboration with colleagues.

Staffing: 1.0 FTE

Hiring Range: $87,339.81 - $

Education:

Bachelor’s degree in information systems or related field, or equivalent work experience.

Required Licensing/Certification:
Certifications for this role include Azure Security, CISSP, CISM, and CPP.

• Knowledge of network and system security, including firewalls, intrusion detection and prevention systems, and encryption technologies.
• Experience with security tools and technologies, such as Azure Entra and Sentinel, Cisco Umbrella and vulnerability scanners.
• Familiarity with security standards and regulations, such as TAC
  202,…