Security Analyst

Information Technology

Search 1654 - Posted January 21, 2024

The Information Security Training Analyst is responsible for protecting the University's information and assets. They assist in the maintenance of the University IT security policies, standards, procedures, and guidelines. They remain informed of industry and government IT compliance issues and known security threats. They will manage a security awareness program, including providing training materials, monitoring compliance and effectiveness, and researching new outreach tools and materials. They will also actively participate in incident response and investigations.

RESPONSIBILITIES:

• Serve as a member of the Information Security team as a key representative when participating in any team project utilizing critical thinking and problem solving to meet team goals and information security compliance. Perform job duties outside of regular business hours including but not limited to maintenance, repair, or installation of equipment or software, and security awarness programs.
• Policy: Assist in the coordination and development of ESU information security policies, standards and procedures. Work with key IT offices, data custodians and governance groups in development of such policies. Ensure that university policies support compliance with external requirements.
• Education and Training; Continually evaluate effectiveness of security awareness instruction, multimedia development, tools and technologies, and end-user development, training, and support services and refines processes to meet the needs of ESU end-users; Communicate security awareness through writing, conference presentations, participation in meetings and summits regarding online and hybrid course development, multimedia development, and end-user development, training, and support; Develop and distribute periodic awareness updates via various communication channels, campus events, and targeted training sessions and department/college presentations for specialized risk areas; e.g. PCI, FERPA, HIPPA, Red Flags
• Maintain Professional Knowledgebase; keep apprised of latest security and privacy legislation, regulations, advisories, alerts and vulnerabilities pertaining to ESU
• Compliance and Enforcement; Work with campus-designated FERPA, records access, and HIPAA-privacy Officers on compliance issues as necessary. Assist in the preparation and submission of reports to external agencies. Work with external auditors and agencies, survey requests, etc. on IT security matters.
• Incident Response; Maintain incident response process to address ESU security incidents and events, respond to alleged policy violations from external parties; support and participate in forensic investigations, incident response, security/system administration, and reports/inquiries submitted by members of university; Serve as team member of campus contact point for information security, privacy, and copyright infringement incidents, including relationships with law enforcement entities.
• Risk Assessment and Incident Prevention; Monitor and advise on information security issues related to the systems and workflow at ESU to ensure the internal security controls for the campus are appropriate and operating as intended; Risk management activities including application and service provider security assessments to identify gaps between campus policy/standards and current practices and procedures; generating remediation action plans and manages through to completion with key stakeholders and system owners
• Building Access Control; Managing electronic door access to the buildings on campus based on the approval of the location owner or assigned designee. Coordination with the ID department on ID card creation, replacement, and destruction. Auditing door access through annual reviews with departments; Provide identity management support for multiple enterprise systems for students, staff, faculty, vendors, visitors, and volunteers; perform annual access audits with departments across campus.

QUALIFICATIONS:

Required Qualifications:

• Requires a Bachelor's Degree with an emphasis in IT Security, as well as at least five years of IT security experience.
  

COMPENSATION:

• Salary range: $24.04 - $28.84 hourly.
• Emporia State University offers a generous benefit package. Find out more about our health benefits, retirement options, paid time off, dependent and spouse tuition waiver program, and many other benefits at this link.

APPLY:

To apply, upload a letter of interest, resume, and contact information for at least three professional references here.

Consideration of applications will begin immediately, and will continue until the position is filled.

A background check and official transcripts are required prior to hire.

For more information

Jose Pavon

HR Professional

jpavon@emporia.edu

Emporia State University is an equal opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to age, race, color, national origin, ethnicity, religion, gender, sex, gender identity, gender expression, marital status, parental status, sexual orientation, genetic information, status as an individual with a disability, status as a protected veteran, or any other factors which cannot be considered by law.