Information Security Analyst I

Iowa State University (ISU) and its Information Technology Services (ITS) Security team is currently accepting applications for an Information Security Analyst I position. ITS Security helps safeguard the information and technology used by the Cyclone community. As part of this work, ITS Security helps ensure controlled datasets are both secure and compliant with relevant security standards.

Your work will support efforts to secure payment card activity, research with sensitive datasets, and university business and financial records. Your role will be primarily consultative. You'll provide guidance to the campus community on how best to align processes with external and internal security standards. You will serve as a technical liaison to assess, track, and remediate technical control deficiencies.

To be successful in this role, you should have strong oral communication, business writing, and presentation skills. You'll be working with many different stakeholder groups, so your ability to guide and influence them is another important skill. Each environment at the university is unique, so you should be good at learning business processes and evaluating the unique risks for each one.

Some key responsibilities include:

• Meet with campus units to understand the people, process, and technology involved in work identified as in-scope for compliance with an external or internal security standard.

• Evaluate the security controls around systems against relevant security standards.

• Identify compliance gaps and general security risks.

• Help design cost-beneficial technical and administrative remedial actions if necessary.

• Communicate the associated security risks, compliance requirements, and necessary remedial steps to key personnel at campus units.

• Liaise with campus unit administrators and other IT professionals to implement remedial actions.

• Answer ad hoc questions from the campus community about security compliance.

• Document work using tools such as Service Now and Atlassian JIRA.

• Review and understand the impact of security language in contractual agreements with external partners.

• Work with researchers and IT professionals to design, document, and implement System Security Plans aligned to standards such as NIST SP 800-171 for research with regulated datasets.

• Bachelor's degree in Information Technology, Information Systems, Management Information Systems or a related field

• Internship, part-time, or early-career experience in technology assurance, audit, risk, consulting, or compliance

• Direct experience applying security frameworks to regulated datasets

• Experience working in Higher Education or other large public sector organizations, Candidates must be legally authorized to work in the U.S. on an ongoing basis without sponsorship. Immigration sponsorship is not available for this position.

By focusing on the future and providing the best student experience possible, Iowa State University (http://www.iastate.edu/) attracts students and faculty who want to make a difference. With a comprehensive land-grant mission of education, research, extension and outreach, we produce scholars whose ideas change the world. And through Innovate at Iowa State, we provide innovative and entrepreneurial opportunities for students of all backgrounds. Located just 30 minutes north of Des Moines, the city of Ames was recently named one of the Top 10 cities in the U.S. for campus life and career opportunities. Iowa State University is a welcoming community of students, faculty, and staff. Campus community members have a wide range of backgrounds and experiences and are committed to engaging with each other respectfully as outlined in the university's Principles of Community (https://www.iastate.edu/principles-community) . Iowa State recognizes that diverse intellectual and philosophical perspectives are vital to innovation, critical thinking skills, and a dynamic academic community that fosters the land-grant ideals of putting science, technology, and human creativity to work.