Information Security Professional II

The University Operations division at UCF is committed to creating a supportive and welcoming environment for our faculty, staff, students, and the broader community. We take pride in delivering exceptional service, sharing our expertise, and upholding the highest standards to ensure a world-class campus experience.

Visit our website or follow us on Facebook and Instagram to learn more.

University Operations is seeking to hire two Information Security Professional IIs support UCF's Identity Governance and Access Management (IGA/IAM) program. The Information Security Professional II administers, monitors, and improves identity lifecycle and access management processes for enterprise systems and institutional users. The role performs operational and technical work related to identity provisioning, access governance, role-based access control, privileged access management, compliance activities, reporting, documentation, stakeholder support, and identity security operations.

The position supports students, faculty, staff, researchers, guests, affiliates, sponsored accounts, privileged accounts, and enterprise applications. Working closely with campus stakeholders, application owners, distributed IT teams, and information security partners, this role helps ensure access is appropriately granted, reviewed, documented, and removed when no longer required. The position also supports audit readiness, compliance initiatives, process improvement efforts, and operational continuity through backup support of other Identity Governance and Access Management functions.

Identity Lifecycle Management

• Manage identity lifecycle activities for students, faculty, staff, researchers, guests, affiliates, and sponsored accounts.
• Perform provisioning, de-provisioning, account updates, affiliation changes, and reconciliation activities.
• Ensure identity processes are completed accurately and securely in accordance with university policies and procedures.
• Monitor identity lifecycle operations across university systems.

Access Management & Authorization Support

• Review, process, and support access requests for enterprise applications and services.
• Apply established access models, business rules, approval workflows, and authorization procedures.
• Assist users and business units with access-related requests and troubleshooting.
• Collaborate with campus partners and technical teams to resolve access-related issues.

Role-Based Access Control (RBAC)

• Maintain RBAC structures, entitlement mappings, and access assignment processes.
• Support updates, testing, documentation, and improvement of authorization frameworks.
• Partner with business and technical teams to resolve access-control issues.

Access Governance, Reviews, Audits, and Compliance

• Coordinate periodic user access reviews, entitlement validation, and access certification activities.
• Support audit requests, internal reviews, third-party assessments, and compliance evaluations.
• Collect, validate, and maintain access records, documentation, and evidence.
• Identify access discrepancies, track remediation efforts, and prepare reports supporting audit and compliance requirements.
• Contribute to security documentation, including plans of action and milestones (POA&Ms) and related compliance artifacts.

Guest, Affiliate, and Sponsored Account Administration

• Administer guest, affiliate, and sponsored account processes from onboarding through de-provisioning.
• Validate sponsor ships, manage renewals and expirations, and ensure access aligns with business needs and institutional policies.

Privileged and Machine Identity Governance

• Support governance of privileged accounts, administrative accounts, service accounts, service principals, application registrations, and other machine identities.
• Maintain inventories, conduct periodic reviews, track exceptions and remediation activities, and support control validation efforts.
• Help ensure privileged access processes remain documented, controlled, and auditable.

Stakeholder Support and Collaboration

• Provide support to university stakeholders, application owners, distributed IT teams, and information security partners.
• Deliver responsive customer service and issue resolution.
• Escalate complex governance, technical, security, or risk-related matters as appropriate.
• Serve as backup support for other Identity Governance and Access Management functions.

Documentation and Process Improvement

• Develop and maintain standard operating procedures, work…