Senior Information Security Analyst

Provides expertise for the design and development of security systems and procedures within a wide range of complexity levels. Primarily responsible for assessing and evaluating enterprise information security solutions. Guides Junior Security Analyst to identify and address risk, and lead the response to information security issues. Provides management and oversees the daily monitoring and mitigation of security threats and issues as they arise. Collaborates and participates in the auditing and assessment of college security policies and procedures to ensure compliance in order to minimize the risk to the confidentiality, integrity, and availability of college data, network, and information systems. Provides recommendations on security initiatives, controls, and best practices. Participates in the development and approval of the designs and selection of security solutions.

A Bachelor’s Degree in computer science, information technology, or related field. 5-10 years of experience in areas of information security administration, network administration and/or information technology systems administration. Candidates with an equivalent combination of experience and/or education are encouraged to apply.

Required Knowledge, Skills and Abilities:

Knowledge of information technology, security concepts, and security frameworks. Experience in the installation, setup and operation of IT infrastructure (e.g., routers, switches, firewalls, intrusion detection/protection devices, and data encryption). Knowledge of operating systems (e.g., Android, iOS, Linux, Windows, VMWare), Cloud computing, networks, hardware and software platforms, and protocols related to information security. Experience performing vulnerability scanning, assessment, and analysis and leading infrastructure patch management. Experience managing and responding to information security risks, threats and incidents. Expert knowledge of applicable information security trends and best practices. Knowledge of applicable internal and/or external regulatory policies, standards, procedures and controls (e.g., NIST, CIS). Knowledge of Payment Card Industry (PCI) controls, and the Federal Risk and Authorization Management Program (FedRAMP). Experience working with IT security vendors to implement and maintain security solutions. Preferred, but not required certifications include: Certified Information Systems Security Professional (CISSP), or Global Information Assurance Certification (GIAC).

*$79,600 - $111,500