Information Security Analyst

Position Title: Information Security Analyst

POSITION TITLE:

Information Security Analyst
STATUS:
Full time
DEPARTMENT:
Information Security Office
DIVISION:
Information Technology
CLASSIFICATION:
Exempt
UNION:
Non-Union

REPORTS TO:

Senior Director Information Security
PLACEMENT:
Professional staff, S11
HIRING RANGE: $70,689 - 79,526
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
The student population at the college is diverse in ethnicity, gender, language, age and background. Joliet Junior College is an AA/EO employer and strongly encourages applications from candidates who would enhance the diversity of its staff.

The Information Security Analyst is responsible for protecting the college's information systems and data by monitoring, analyzing, and responding to security incidents and threats. This role supports compliance with regulatory requirements (e.g., CIRCIA, HIPAA, GLBA), enhances operational efficiency, and contributes to the continual improvement of security processes and documentation. The analyst will also detect opportunities to develop and maintain security documentation, including knowledgebase articles, and manage security‑related tickets from stakeholders.

• Incident Management:
  Monitor, triage, and respond to cybersecurity threats and incidents across network, application, identity, and cloud layers.
• Vulnerability Management:
  Participate in vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Security Operations:
  Manage and maintain security tools (e.g., SIEM, IDS/IPS, vulnerability scanners), ensuring daily monitoring and compliance.
• Facilitate the integration of SOC/Managed Security Services activities with the broader Information Security team, ensuring consistent application of ITIL processes such as Incident Management, Problem Management, and Event Management.
• Identity Management:
  Support Office 365 email account management tasks, including user permissions, credential hand-offs, mailbox access provisioning, and coordination with identity and access management processes.
• Compliance &
  
  Risk Management:
  
  Assist in legal and regulatory compliance efforts; conduct risk assessments and support audit activities.
• Service Request Management:
  Handle, triage, and manage tier‑2 level and up security‑related tickets and requests from stakeholders, ensuring timely resolution and escalation as needed.
• Knowledge Management:
  Detect opportunities to develop, improve, and maintain security documentation, including knowledgebase articles and process guides.
• Process Improvement:
  Assist with the development and continual improvement of security‑related processes, automation initiatives, and reporting tools.
• Cloud Support:
  Support secure cloud infrastructure through systems auditing and account lifecycle management.
• Collaboration & Training:
  Collaborate with IT and academic departments to ensure secure deployment of new technologies; provide security awareness training to staff and students.
• Reporting:
  Prepare and present reports on security incidents, vulnerabilities, compliance status, and process improvements to leadership.
• Professional Development:
  Stay current with emerging security threats, trends, best practices, and ITIL service management principles.
• Perform related duties as assigned.

• Bachelor's degree in Computer Science or a closely related field, OR an Associate's degree combined with 2‑4 years of experience in information security or IT operations.
• Ability to establish and maintain cooperative and effective working relationships with other members of the college and community, displaying cultural competence as well as emotional intelligence.
• Demonstrated commitment to the college's core values of respect and inclusion, sustainability, integrity, collaboration, humor and well‑being, innovation and quality. Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field.
• Understanding of cybersecurity principles, tools, and compliance frameworks.
• Experience with Microsoft…