Information Security Specialist

The
Information Security Specialist
, part of the Information Security team in the IT Department, is responsible for supporting the team in protecting computer assets by establishing and enforcing system access controls, providing security incident response, conducting security awareness activities, and maintaining disaster preparedness.

This position will significantly enhance the Info Sec team’s ability to proactively address evolving security threats and protect the organization’s ICT infrastructure and information assets. With the addition of this role, the team will have the capacity to strengthen security operations, improve monitoring capabilities, and effectively implement security measures for both ongoing and upcoming projects, including those involving cloud technologies and new services.

This role will enable the team to deliver projects on time, enhance current security controls, and respond swiftly to incidents, minimizing potential risks to the organization. It will also alleviate the workload on existing team members, fostering a more balanced and collaborative work environment.

• Support the Information Security Manager and the Information Security team with daily tasks, including but not limited to incident response, investigations, project management, assurance tasks, and reporting responsibilities.
• Ensure authorized access by investigating improper access attempts and reporting violations.
• Create concise and comprehensive reports on security violations, including recommendations for addressing identified control weaknesses.
• Conduct system and process audits methodically to verify compliance with adopted processes, policies, and standards.
• Advocate for security awareness, stay up-to-date with cybersecurity trends, and incorporate best practices into daily work.
• Protect systems by defining access privileges, control structures, and resources.
• Assist in the development and implementation of AUS’ IT Disaster Recovery/Business Continuity plan, and maintain disaster recovery documentation, policies, and protocols.
• Implement security improvements by assessing the current situation, evaluating trends, and anticipating future requirements.
• Provide thought leadership within the Information Security and IT teams to help implement or enhance existing information security controls.
• Maintain technical knowledge by attending educational workshops and reviewing relevant publications.
• Ensure industry-standard practices are followed across various IT areas, such as network security, server security, application security, end device security, and forensic investigations.
• Create, maintain, and enforce the university’s security documents (policies, standards, guidelines, and procedures).
• Stay updated on IT security industry trends, including new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
• Select and acquire additional security solutions or enhancements to existing solutions to improve overall enterprise security, in line with the university’s procurement processes.
• Oversee the deployment, integration, and initial configuration of new security solutions and enhancements to existing solutions, following best practices.
• Ensure the confidentiality, integrity, and availability of data residing on or transmitted to/from/through workstations, servers, and other systems, as well as in databases and other data repositories.
• Engage in ongoing communication with peers in the Systems and Networking groups, as well as with various business groups, to ensure enterprise-wide understanding of security goals, solicit feedback, and foster cooperation.

• Maintain and encourage open and honest business relationships within the team and across AUS.
• Lead change as AUS continues to adapt to new and exciting ways of delivering ICT services.
• Build and foster strong working relationships with internal business partners across the organization.
• Communicate respectfully and in a manner that is clear and well-understood.
• Prioritize health and safety for yourself and others.
• Manage a diverse range of tasks while working under tight…