Information Security Analyst 2, Digital Technology Solutions

Current UC employees must apply internally via SuccessFactors 

Founded in 1819, the University of Cincinnati ranks among the nation’s best urban public research universities. Home to 53,235 students, more than 11,000 faculty and staff and 350,000+ living alumni, UC combines a Top 35 public research university with a physical setting The New York Times calls “the most ambitious campus design program in the country.”

With the launch of Next Lives Here, the Cincinnati Innovation District, a $100 million JobsOhio investment, three straight years of record enrollment, worldwide leadership in cooperative education, a dynamic academic health center and entry into the Big 12 Conference, UC’s momentum has never been stronger. UC’s annual budget stands at $1.85 billion, and its endowment totals nearly $1.8 billion.

Job Overview

Assist in performing procedures and provides technical solutions that serve to provide appropriate access to and protect systems from unauthorized users.

Essential Functions

• Clearly convey complex security information to both technical and non-technical stakeholders.
• Participate in developing technical documentation (designs, specifications, processes, workflows) and communications.
• Mentor and delegate work assignments to student workers.  
• Participate in multiple low and moderate risk projects. Work with a team to advance project goals and provide technical assistance.
• Document individual progress on assigned deliverables.
• Gather metrics for area of responsibility.
• Carry out procedures to ensure that all systems, products, and services meet organization security standards.
• Research information security trends to understand the latest vulnerabilities and threats.
• Conduct risk and vulnerability assessments of information systems to identity vulnerabilities, risk, and protection needs.
• Assist with providing artifacts to Governance, Risk & Compliance in relation to internal & external audits.
• With limited support, work with business units to achieve security objectives. Identify, report, and resolve security risks and violations.
• Develop subject matter expertise on security applications and services in the area of responsibility.
• With limited support, conduct information security reviews; determine and document risk and impact on the university; provide baseline remediation recommendations.
• Assist with cyber investigations through forensic fact gathering with a focus on e-discovery.
• Analyze high volumes of logs, network data, and other attack artifacts in support of incident investigations.
• Develop content for and present information security training and awareness programs.
• Develop familiarity with data security laws and regulations applicable to higher education.
• Participate in troubleshooting processes during and outside of normal business hours and participate in change management.
• Mentor non-security teams regarding risk management, information security controls, incident analysis, incident response, monitoring, and other operational tasks (tools, techniques, procedures) in support of technologies managed by the Office of Information Security (OIS).
• Serve as seasoned and proficient information security professional.
• Perform related duties based on departmental need. This job description can be changed at any time.

Required Education

• Bachelor's Degree in in Computer Science, Information Technology, Computer Engineering, or related field.
• Four (4) years of relevant work experience and/or other specialized training can be used in lieu of education requirement.

Required Experience

• Experience in security tool administration.
• Basic scripting skills.
• Basic project management skills.
• Understanding of system administration.
• Basic of network architecture.
• Moderate understanding of risk and vulnerability management.
• Basic awareness of incident response.
• Experience with industry standard security and compliance frameworks.

Additional Qualifications Considered

This position will primarily work in the area of information security education and awareness. The ideal candidate will have experience in the field of information security education awareness or similar. Responsibilities may include, but are not limited to: creating education materials including printed and virtual documents, images, and videos, creation of training videos, facilitating in-person and virtual training events and outreach events, creating/designing and maintaining inventory of departmental handouts, managing departmental websites, intranet sites, and social media presences, as well as departmental customer service via enterprise incident ticketing system and departmental mailboxes. CISSP, CISM, GISP or similar information security certification(s) are preferred.

Physical Requirements/Work Environment

• Hearing, listening - Continuously
• Repetitive hand motion (such as typing) - Continuously
• Talking - Continuously
• Sitting - Continuously
• Bending - Seldom
• Climbing stairs/ladders - Seldom
• Crawling - Seldom
• Crouching - Seldom
• Kneeling, squatting - Seldom
• Lifting - over 50 pounds - Seldom
• Lifting - up to 20 pounds - Seldom
• Lifting - up to 50 pounds - Seldom
• Pulling, pushing - Seldom
• Reaching overhead - Seldom
• Standing - Seldom
• Stooping - Seldom
• Walking - Seldom
• Shoveling - Not Required

Compensation and Benefits

UC offers a wide array of complementary and affordable benefit options, to meet the financial, educational, health, and wellness needs of you and your family. Eligibility varies by position and FTE.

• Competitive salary range dependent on the candidate's experience.
• Comprehensive insurance plans including medical, dental, vision, and prescription coverage.
• Flexible spending accounts and an award-winning employee wellness program, plus an employee assistance program.
• Financial security via our life and long-term disability insurance, accident and illness insurance, and retirement savings plans.
• Generous paid time off work options including vacation, sick leave, annual holidays, and winter season days in addition to paid parental leave.
• Tuition remission is available for employees and their eligible dependents.
• Enjoy discounts for on and off-campus activities and services.

As a UC employee, and an employee of an Ohio public institution, if hired you will not contribute to the federal Social Security system, other than contributions to Medicare. Instead, UC employees have the option to contribute to a state retirement plan (OPERS, STRS) or an alternative retirement plan (ARP).

To learn more about why UC is a great place to work, please visit our careers page at https://www.uc.edu/careers.html.

For questions about the UC recruiting process or to request accommodations with the application, please contact Human Resources at jobs@uc.edu. 

The University of Cincinnati is an Equal Opportunity Employer.

REQ: 97770 

SF:OMJ SF:RM SF:HEJ, SF:INS SF:HERC SF:DIV SF:LJN SF:IHE