Cybersecurity Risk Analyst II

IT Risk Analyst II

UF Information Technology (UFIT) is currently seeking an intermediate level Cybersecurity Risk Analyst II to join the Information Security Office, a unit within UFIT.

Employment with UFIT provides an excellent opportunity to work with other employees dedicated and focused on understanding and interpreting the technological needs of the University of Florida’s innovative and inspirational community.

The Cybersecurity Risk Analyst II role within the Information Assurance team of the Information Security Office supports the information security environment throughout UF by executing the risk management process to assist university units in protecting the confidentiality, integrity, and availability of UF data and information systems in compliance with law, regulations, policies, and standards at the University of Florida (UF). Additionally, this position helps to create a risk aware culture by contributing to information security training and awareness activities.
Some key responsibilities and characteristics of this position are:

• Executes the UF Information risk assessment process, which includes (but is not limited to):
  • Assists units in developing and maintaining an accurate inventory of data and systems
  • Guides units in creating security plans for all systems
  • Executes the risk management process concluding with risk assessments for all systems
• Collaborates on recommendations for security systems, tools, and procedures to meet defined security requirements and goals:
  • Provides security guidance to help units improve security posture and reduce risk
  • Recommends processes and procedures to implement UF information security policies and standards
  • Assists units to select technology that has already been assessed for security and implemented in UF’s information technology environment
• Contributes to the information security training and awareness program, which includes (but is not limited to):
  • Collaborates with communications, training, web development, and other teams to prepare and produce content, materials, and events
  • Serves as a technical resource for other teams supporting information security training and awareness activities
  • Organizes and staffs information security awareness events

About UF Information Technology 

UF Information Technology is comprised of eight departments reporting to the Vice President and Chief Information Officer: Academic Technology; Applications, Development, and Integrations; Business Center; Customer Experience and Resource Planning; Data Platform and Analytics; Information Security Office; Infrastructure and Communication Technology; and Research Computing. With established governance advisory committees and a set of well-defined, transparent processes aiding decision-making, UFIT strives to provide exceptional IT services in support of UF’s mission. For more information about UFIT and its goals and governance, visit  http://www.it.ufl.edu/vp-cio-office/strategic-plan/ .

Learn more about UFIT at https://it.ufl.edu/ and @GoGatorsUFIT.

About the University of Florida 

UF is one of the nation’s top-5 universities and a dynamic and rewarding place to work. The University seeks to recruit and retain a diverse workforce as a reflection of its commitment to serving a diverse global community.  UF is in Gainesville, one of Florida’s most livable cities. Known for its natural attractions (wetlands, forests, springs, wildlife) and cultural offerings (music, theater, visual arts, and historic districts), the area also is gaining a reputation as a thriving hub for high-tech start-ups, as well as invention and research collaborations. We are excited about what’s happening here and know you will want to be a part of it.

Benefits

Full-time TEAMS employees will accrue vacation leave at a rate of 6.769 hours biweekly/22 days annually and sick leave at a rate of 4 hours biweekly/13 days annually. In addition, employees are eligible for ten paid holidays each year.

Vacation accruing TEAMS employees are eligible for four personal leave days/32 hours per year, assuming full-time status, and are intended to give the flexibility to enable units to close from December 26 to 31 when possible, determined on a unit-by-unit basis.

In addition to paid time off, the University of Florida offers a very competitive benefits package.

Achieving a top-5 public university ranking means we make it a priority to employ and work with people with diverse experiences, backgrounds, and perspectives to discover new ways to leverage technology for teaching, learning, research, and the business needs of a comprehensive land-grant institution.

Every Gator has a part to play, and we invite you to join us as we build a community founded on belonging, inclusion, and the freedom to thrive.

$73,400 – $82,400; commensurate based on education and experience. 

Associate’s degree and two years of relevant experience; or a high school diploma or equivalent and four years of relevant experience. Appropriate college coursework or vocational/technical training may substitute at an equivalent rate for the required experience.

The ideal candidate will possess the following education, experience, and skills:

• 2-4 years of combined IT and security experience with a broad range of exposure to data, network systems, and web applications preferred
• Novice level knowledge of security issues, techniques, and implications across all existing computer platforms
• Familiarity with security standards, applicable laws, and regulations (National Institute of Standards and Technology (NIST), Health Insurance Portability and Accountability Act (HIPAA)
• CompTIA Security+, Associate of (ISC)2 , GIAC GSEC or GISP, or equivalent
• Excellent written and verbal communication skills, outstanding communicator; interpersonal skills; and the ability to work collegially and interact effectively with a diverse constituency
• Excellent organizational skills and an ability to prioritize and complete simultaneous projects with minimal supervision

This position requires U.S. work authorization.

This role will be based in one of our Gainesville offices and may include a hybrid schedule of 3 days in the office (Wednesday required), and 2 days remote.

Applicants are required to submit the following with their application:

• Cover Letter
• Resume or CV
• Professional References (Minimum of 3)

The application must be submitted by 11:55 p.m. of the posting end date.