Information Security Analysts

Information Security Analyst – University of Utah

About UIT:
University Information Technology (UIT), the central IT service provider for the University of Utah, reports to the U’s Chief Information Officer and is responsible for many of the U’s shared IT services including the wired and wireless network, Campus Information Services (CIS) portal, UMail, telephone, and online collaboration, digital learning technologies, information security, software licensing, and a host of other IT systems and services.

About the University of Utah:
Located in Salt Lake City, the U is the flagship institution of the State of Utah’s system of higher education, home to arts and museum venues and a member of the BIG-12 Conference
. Skiing and snowboarding opportunities are a short distance from campus, and opportunities to pursue activities from biking to hiking to fishing abound
. Salt Lake City is home to the Utah Symphony and Opera
, Ballet West
, professional sports teams
, and a wide range of other cultural and recreational activities.

The University of Utah offers a comprehensive benefits package for eligible employees, including:

• 50% tuition reduction for employees after completing probationary period, and spouse, and dependent children after three years
• Employee discounts on a variety of products and services including cell phones & plans, entertainment, health and fitness, restaurants, retail, and travel
• A wellness program to promote health and quality of life
• Learn more about the great benefits of working for University of Utah:
  benefits.utah.edu

Job Summary

Information Security Analysts

The incumbent will play a critical role in safeguarding regulated data across the enterprise by monitoring and analyzing the organization’s data security posture. This position focuses on configuring Data Security Posture Management (DSPM) settings and policies, interpreting results, creating reports, identifying risks, and ensuring compliance. The analyst will take a risk-based approach to assess and remediate issues related to unauthorized storage or transmission of regulated data across cloud and on-premise environments.

• Review and analyze DSPM tool outputs to identify misconfigurations, unauthorized data flows, and storage of regulated data in non-approved locations.
• Monitor the movement of sensitive data across cloud and on-prem systems, ensuring compliance with internal policies and regulatory requirements.
• Apply a risk-based methodology to prioritize remediation efforts.
• Maintain applicable risk register entries and document findings for governance reporting.
• Partner with the Enterprise Security team to validate technical controls.
• Work closely with the Chief Data Officer and Privacy Office to align DSPM findings with data governance and privacy requirements.
• Ensure adherence to frameworks such as NIST CSF, CIS 18, and other applicable regulations (e.g., HIPAA, FERPA, etc.).
• Support audits and compliance reviews by providing DSPM-related evidence.
• Prepare dashboards and reports for leadership summarizing DSPM findings, trends, and risk posture.
• Communicate actionable insights to stakeholders in clear, business-focused language.

• EQUIVALENCY STATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor’s degree = 4 years of directly related work experience).
• Information Security Analyst, III:
  Requires a bachelor’s (or equivalency) + 6 years or a master’s (or equivalency) + 4 years of directly related work experience.
• Information Security Analyst, IV:
  Requires a bachelor’s (or equivalency) + 8 years or a master’s (or equivalency) + 6 years of directly related work experience.
• Information Security Analyst, V:
  Requires a bachelor’s (or equivalency) + 10 years or a master’s (or equivalency) + 8 years of directly related work experience.

• Certifications such as CISSP, CRISC, or equivalent.
• Master’s degree in information security or another relevant field.
• Experience with a DSPM tool.
• 3+ years that are specifically tied to GRC experience.

• * What is your highest level of completed education?
  • None
  • High School Diploma…