Enterprise Information Security Analyst

$75,000 - $75,000/Yr

The University of Texas System - Austin, TX

Part-time - Mid Level

Austin, TX

Educational Services

About the position

The Office of Information Technology at the Dell Medical School is seeking an Enterprise Information Security Analyst to support the security and risk management initiatives of the institution. This role is pivotal in ensuring the confidentiality, integrity, and availability of the University of Texas at Austin Dell Medical School's information assets. The analyst will work under the guidance of the Manager of Enterprise IT Security and Operations and collaborate closely with the Enterprise Cybersecurity Architect. The primary focus will be on Security Operations and IT Risk Assessment, which are critical domains in the realm of information security. In this position, the analyst will be responsible for developing and maintaining security policies, procedures, and standards that align with industry best practices and compliance requirements, including HIPAA, FERPA, PCI DSS, and GDPR. The role involves creating and managing a variety of security and risk documentation, conducting thorough research on emerging cybersecurity threats, and recommending strategies to mitigate risks. The analyst will also be tasked with monitoring security events and incidents using SIEM tools, conducting audits, and collaborating with cross-functional teams to enhance the overall security posture of the organization. The Enterprise Information Security Analyst will play a crucial role in promoting a culture of security awareness within the organization, participating in training sessions, and ensuring that all employees understand their responsibilities regarding information security. This position is expected to evolve with the changing landscape of cybersecurity, requiring the analyst to stay informed about new technologies and regulatory changes that may impact the university's security framework.

Responsibilities

• Develop and maintain security policies, procedures, and standards to ensure compliance with industry standards and regulations.
• Create and maintain security and risk documentation, including policies, process diagrams, and risk registers.
• Research and analyze emerging cybersecurity threats and recommend mitigation strategies.
• Monitor and analyze security events and incidents using SIEM tools to identify potential threats.
• Conduct cybersecurity audits and assessments to identify and remediate vulnerabilities.
• Collaborate with IT, operations, and compliance teams to enhance security measures.
• Participate in business continuity and disaster recovery planning.
• Provide security awareness training to promote a culture of security compliance among employees.
• Prepare reports on cybersecurity breaches, incidents, and alerts.

Requirements

• Bachelor's degree plus 4 years of experience in information technology, security, or risk management.
• CompTIA Security+ or other industry-related certifications.
• Demonstrated ability to analyze IT security threats and understand risk.
• Working knowledge of various operating systems (Windows, Linux, macOS) and security tools (SIEMs, DLP).
• Excellent problem-solving skills and attention to detail.
• Experience with network protocols and firewall concepts.
• Ability to perform IT security risk assessments and develop compensating controls.

Nice-to-haves

• Healthcare experience.
• Experience in network scanning or cloud security.
• Knowledge of risk management frameworks (RMF).
• Knowledge of Incident Response (IR).
• Certified Ethical Hacker (CEH).
• Experience with SQL, SPL, or scripting languages like Python and PowerShell.

Benefits

• Retirement plan through Teacher Retirement System of Texas (TRS).
• Health insurance coverage.
• Paid holidays and vacation time.
• Professional development opportunities.