Information Security Analyst
Indiana University

Department

UITS ACADEMIC TECHNOLOGY SUPPO (UA-CATS-IUBLA)

Department Information

At University Information Technology Services (UITS) we provide the technology, tools, and services you need to succeed. UITS supports IU's vision for excellence in research, teaching, outreach, and lifelong learning. We ensure a workplace that encourages growth, flexibility, and creativity, as well as a culture that champions inclusion, diversity, and overall employee well-being through programs supported university wide. As an Equal Opportunity Employer, we believe in each person's potential, and we'll help you reach yours.

The UITS Academic Technology Support's College Information Security and Policy Office (CISPO) helps educate, train, and assist in addressing cyber security risks within the College of Arts + Sciences (COLL) and the Office of the Vice President for Diversity, Equity and Inclusion (OVPDEI). CISPO helps to ensure that institutional information technology risks are assessed, prioritized, and managed on an ongoing basis to ensure operational; reputational; and regulatory risks to the institution; institutional assets; and varied stakeholders.

Job Summary

Department Specific Responsibilities

• Works independently and performs analysis of cybersecurity risk on supported systems, software, and networks.
• Develops alerts, notifications, and other information products based on that analysis.
• Collects, analyzes, and disseminates analysis regarding software vulnerabilities, risks to network and systems infrastructure, and relevant threats.
• Responds to requests for security analysis; write reports, papers, or other products as required.
• Develops information products.
• Develops and maintains security processes and supporting tools to improve the field of cybersecurity generally, and within the communities we serve.
• Gives presentations and trainings, writes papers and other training materials.
• Responds to cybersecurity incidents that affect supported networks or that have widespread impact.
• Responds to incidents of computer security breaches and other incidents involving the use of technology and provides advice to and/or participates in the collection of technical evidence as required.
• Designs and carries out cybersecurity exercises to test responses in simulated scenarios, internal to the University or with external partners.
• Attends departmental meetings to help guide IT initiatives, collaborating with appropriate teams as needed.
• Contributes to cybersecurity policies and practices for team members or outside collaborators, understanding the security needs of devices, networks, and software, which may be novel, and communicates relevant information to collaborators who are not themselves cybersecurity experts.
• Undertakes professional development to advance skills in support of the University activities.

General Responsibilities

• Performs ongoing experienced analysis and monitoring of technology environments to identify security exposures and potential threats.
• Assesses and determines level of risk in order to provide threat information, as well as to advise and/or recommend protections and solutions, to security leadership and department decision-makers.
• Documents information security analysis efforts.
• Researches and stays abreast of current higher education security environment and trends; stays up-to-date on security analysis and monitoring best practices, tools, and approaches.
• Responsible for communication, awareness and training efforts for faculty, staff and student population through the creation of informational bulletins, best practices.
• Works closely with security engineers to ensure exposures and risks are avoided and/or addressed.
• Contributes to incident response investigations and assists with disaster recovery and business continuity efforts.

Qualifications

This position is posted at the Career Level but may be filled at the Core Level depending on the candidate's qualifications. Although they will be similar, the duties and responsibilities may differ if filled at the lower rank. Please see the qualifications for each level listed below.

Career Level Requirements

Combinations of related education and experience may be considered. Education beyond the minimum required may be substituted for work experience. Work experience beyond the minimum required may be substituted for education.

EDUCATION

Required

• Bachelor's degree (preferably in computer science or related field)

WORK EXPERIENCE

Required

• 2 years of information security or related experience

SKILLS

Required

• Proficient communication skills
• Maintains a high degree of professionalism
• Demonstrates time management and priority setting skills
• Demonstrates a high commitment to quality
• Possesses flexibility to work in a fast paced, dynamic environment
• Seeks to acquire knowledge in area of specialty
• Highly thorough and dependable
• Demonstrates a high level of accuracy, even under pressure
• Demonstrates in-depth knowledge of Microsoft Windows or Unix-like operating systems
• Attention to detail in communicating technical issues and implementing solutions
• Mental discipline in conducting lengthy investigations

Core Level Requirements

Combinations of related education and experience may be considered. Education beyond the minimum required may be substituted for work experience. Work experience beyond the minimum required may be substituted for education.

EDUCATION

Required

• Bachelor's degree (preferably in computer science or related field)

WORK EXPERIENCE

Preferred

• Some experience in information security or related experience

SKILLS

Required

• Proficient communication skills
• Maintains a high degree of professionalism
• Demonstrates time management and priority setting skills
• Demonstrates a high commitment to quality
• Possesses flexibility to work in a fast paced, dynamic environment
• Seeks to acquire knowledge in area of specialty
• Demonstrates in-depth knowledge of Microsoft Windows or Unix-like operating systems
• Attention to detail in communicating technical issues and implementing solutions

Working Conditions / Demands

This role requires the ability to effectively communicate and to operate a computer and other standard office productivity equipment. The position involves sedentary work as well as periods of time moving around an office environment and the campus. The person in this role must be able to perform the essential functions with or without an accommodation.

Work Location

This position is a work on campus role with eligibility for some remote work, subject to change in the future based on Indiana University policy and business needs.

Benefits Overview

For full-time staff employees, Indiana University offers a wide array of benefits including:

• Multiple plan options for medical insurance
• Dental insurance
• Health Savings Account with generous IU contribution
• Life insurance, LTD, and AD&D options
• Base retirement plan contribution from IU, subject to vesting
• Additional supplemental retirement plan options
• Tuition benefit for IU classes
• 10 paid holidays per year
• Generous Paid Time Off
• Paid Parental Leave
• Employee Assistance Program (EAP)

Learn more about our benefits by reviewing our online Benefits Brochure.

Job Classification

Career Level: Career

FLSA: Exempt

Job Function: Information Technology

Job Family: IT Security & Privacy

Click here to learn more about Indiana University's Job Framework.

Posting Disclaimer

This posting is scheduled to close at 11:59 pm EST on the advertised Close Date. This posting may be closed at any time at the discretion of the University, but will remain open for a minimum of 5 business days. To guarantee full consideration, please submit your application within 5 business days of the Posted Date.

If you wish to include a cover letter, you may include it with your resume when uploading attachments.

Equal Employment Opportunity

Indiana University is an equal employment and affirmative action employer and a provider of ADA services. All qualified applicants will receive consideration for employment based on individual qualifications. Indiana University prohibits discrimination based on age, ethnicity, color, race, religion, sex, sexual orientation, gender identity or expression, genetic information, marital status, national origin, disability status or protected veteran status. Indiana University does not discriminate on the basis of sex in its educational programs and activities, including employment and admission, as required by Title IX. Questions or complaints regarding Title IX may be referred to the U.S. Department of Education Office for Civil Rights or the university Title IX Coordinator. See Indiana University's Notice of Non-Discrimination here which includes contact information.

Campus Safety and Security

The Annual Security and Fire Safety Report, containing policy statements, crime and fire statistics for all Indiana University campuses, is available online. You may also request a physical copy by emailing IU Public Safety at iups@iu.edu or by visiting IUPD.

Contact Us

Request Support
Telephone: 812-856-1234

This job has expired.