Information Security Engineer

Job Summary

An Eastern Kentucky University Information Security Engineer is responsible for designing, implementing, and maintaining technical security controls that protect university information systems and data. This role combines hands‑on security engineering and operational responsibilities with governance, risk, and compliance (GRC) support to ensure security controls are effectively implemented, monitored, documented, and aligned with institutional policies, legal requirements, and industry best practices. The position is hybrid, requiring at least 3 days per week in the Richmond campus office.

• Bachelor’s Degree (required)
• One year of work experience (required)

• Preferred certifications such as Security+, CISSP, CISA, CISM, or CGRC.

• 55% - Security Engineering and Operations (Essential)
• 30% - Governance, Risk, and Compliance (Essential)
• 10% - Security Strategy, Policy, and Collaboration (Essential)
• 5% - Contributes to the effective operations of the department and the University by completing all other duties and special projects as assigned (Essential)

Eastern Kentucky University is an Equal Opportunity employer and educational institution and does not discriminate on the basis of age (40 and over), race, color, religion, sex, sexual orientation, gender identity, gender expression, pregnancy, ethnicity, disability, national origin, veteran status, or genetic information in the admission to, or participation in, any educational program or activity (e.g., athletics, academics and housing) which it conducts or any employment policy or practice.

Offers of employment are contingent upon a satisfactory background check.