University of Cincinnati - Cincinnati, OH
posted 4 months ago
The Information Security Analyst 2 position at the University of Cincinnati is a full-time role that involves joining a dedicated team of information security professionals. This team supports the office of information security, focusing on critical areas such as information security incident response, digital investigations, and digital forensics. The selected candidate will play a vital role in mentoring student workers in the security operations center (SOC) and will collaborate with other information security professionals across the university. In this role, the analyst will be responsible for clearly conveying complex security information to both technical and non-technical stakeholders. They will participate in the development of technical documentation, including designs, specifications, processes, and workflows, while also mentoring and delegating work assignments to student workers. The analyst will engage in multiple low to moderate risk projects, working collaboratively with the team to advance project goals and provide necessary technical assistance. The position requires the analyst to document individual progress on assigned deliverables, gather metrics for their area of responsibility, and ensure that all systems, products, and services meet organizational security standards. They will conduct risk and vulnerability assessments of information systems to identify vulnerabilities and protection needs, assist with providing artifacts for Governance, Risk & Compliance in relation to audits, and work with business units to achieve security objectives. Additionally, the analyst will develop subject matter expertise on security applications and services, conduct information security reviews, assist with cyber investigations, analyze logs and network data, and develop content for information security training programs. The role also involves mentoring non-security teams regarding risk management and incident response, ensuring a comprehensive approach to information security within the university.