Information Technology Security Analyst

South Orange County Community College District - Mission Viejo, CA

Full-time

Mission Viejo, CA

Educational Services

About the position

The Information Technology Security Analyst position at South Orange County Community College District is responsible for ensuring the secure operation of computer systems, servers, and network connections. The analyst will assist in detecting, investigating, and defending against information security incidents, while also ensuring compliance with relevant regulations and policies. This role serves as the primary administrator and technical resource for the District-wide information security program, promoting a strong security culture throughout the organization.

Responsibilities

• Serve as a core member of District IT security performing varying security duties including threat awareness, proactive network traffic analysis, incident response, forensic analysis, and resolution of security incidents.
• Act as Team Leader on information security projects.
• Act as a liaison to the District-wide user community; perform regular workshops and inservices on topics of information security.
• Maintain, refine, and expand existing data security program.
• Evaluate existing and emerging regulations and laws to ensure continual SOCCCD compliance.
• Integrate knowledge of network protocols, services, threats, vulnerabilities, mitigation strategies, hardware capabilities, and other information to build a security environment that reduces and mitigates risk.
• Evaluate a wide range of data to detect security incidents.
• Take timely action as appropriate: block problem traffic, send alerts and/or investigate when suspicious activity is detected.
• Develop new methods to detect and mitigate security attacks.
• Communicate with internal and external security personnel and technical staff about incidents.
• Develop and implement enforcement policies, procedures and associated plans for system security administration and user system access based on industry-standard best practices.
• Promote a strong security culture throughout SOCCCD, consulting with management and staff.
• Conduct assessments of information systems security requirements, evaluate current security posture and recommend priorities for remediation.

Requirements

• Equivalent to a Bachelor's degree from an accredited college or university with major course work in a technical field such as computer science.
• Three years of increasingly responsible technical work experience in technology service operations with demonstrated information security responsibilities.
• Knowledge of data encryption techniques including but not limited to PKI.
• Experience in incident response procedures and computer forensics.
• Experience with SSAE 16 audits, GLBA, PCI-DSS, FERPA, HIPPA compliance.
• Role-base access applied to various services and technologies.
• Security best practices of Servers, LAN and WAN networks, virtualization and Cloud.
• Software development security best practices including but not limited to OWASP.

Nice-to-haves

• CISSP certification is highly desirable and preferred.