> Markdown version of [/jobs/ext/3751606-information-security-professional-ii](https://www.wearedevelopers.com/jobs/ext/3751606-information-security-professional-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Professional II

- **Company:** University of Central Florida
- **Location:** Orlando, FL, United States
- **Salary:** $64,518.0 - $80,000.0
- **Contract:** Permanent contract
- **Skills:** CompTIA Security+, Cyber Security, System Configuration, PCI Data Security Standards, Service Pack, Security Information and Event Management, Software Vulnerability Management, CIS Benchmarks, Vulnerability Analysis
- **Published:** October 15, 2026
- **Apply:** https://diversityjobs.com/career/18630176/Information-Security-Professional-Ii-Florida-Orlando

## About the Role

Bachelor's degree and 2 years of relevant experience; or High School Diploma (or equivalent) and 6 years of relevant work experience in lieu of degree; or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6)., * Experience managing or participating in Vendor Risk Management (VRM) programs.

 * Experience conducting security assessments, vulnerability reviews, and compliance audits.
 * Knowledge of security frameworks and standards such as NIST, CIS Controls, ISO 27001, FERPA, HIPAA, or PCI-DSS.
 * Experience working within higher education, government, or large complex organizations.
 * Professional certifications such as Security+, CISSP, CISM, CISA, CRISC, or related credentials.
 * Experience with vulnerability management and security monitoring tools.

Special Instructions to the Applicants:

Position requires a valid Class E driver's license. This position may involve driving to various locations on and off campus to conduct University business.

## Description

University Operations is seeking to hire an Information Security Professional II. This role will support and strengthen the institution's cybersecurity and compliance program. This position plays a critical role in safeguarding university information assets by assessing risk, monitoring compliance, managing vendor risk reviews, conducting security assessments, and promoting information security best practices across the organization. The successful candidate will collaborate with departments, business units, and technology partners to identify vulnerabilities, mitigate risks, and enhance the University's overall security posture., * Monitor compliance with university information security policies, standards, regulatory requirements, contractual obligations, and applicable laws.

 * Develop, maintain, and promote information security policies, standards, guidelines, and best practices.
 * Manage and administer the University's Vendor Risk Management (VRM) program, including conducting vendor security reviews and assessments.
 * Partner with colleges, departments, and business units to evaluate security and compliance risks and recommend corrective actions.
 * Perform risk assessments, compliance reviews, vulnerability analyses, and security evaluations of existing and proposed technology solutions.
 * Analyze security findings and communicate recommendations to stakeholders to improve security posture and reduce risk.
 * Track remediation activities and verify implementation of required security patches, configurations, and corrective actions.
 * Monitor vulnerability scans, security assessments, system configurations, and relevant security information to identify potential risks.
 * Coordinate and track mitigation and remediation efforts across technical and business teams.
 * Utilize automated and manual assessment techniques to identify, validate, and evaluate security vulnerabilities.
 * Research emerging cybersecurity threats, tools, and industry best practices to strengthen the University's security program.
 * Conduct compliance activities and security reviews to ensure adherence to established security objectives and standards.
 * Promote a culture of security awareness while maintaining productive partnerships and delivering exceptional customer service.