Cybersecurity Analyst II

Oklahoma-State-University; Stillwater (OK); On-site; USD 55,000 - 70,000; Full time

Job summary

Oklahoma State University is seeking a Cybersecurity Analyst II to provide professional and technical expertise to support enterprise technology services. You will contribute to the Security Operations Center (SOC) and Governance, Risk, and Compliance (GRC) functions across the OSU A&M System.

The role collaborates with multiple campuses, business units, and stakeholders to protect institutional information assets, perform moderately complex tasks, and escalate enterprise-wide issues through

Qualifications

• Bachelor's degree (conferred by start date).
• 2 years in an IT-related field (customer support, sys admin, etc.).
• Experience supporting enterprise-scale IT/security environments.
• Education substitutions allowed (master's may substitute for up to 2 years).

Responsibilities

• Provide cybersecurity analysis and operational tasks enterprise-wide.
• Support SOC and GRC functions across the OSU A&M System.
• Coordinate with ISS staff, central IT, campuses, and stakeholders to protect systems and data.

Skills

Cybersecurity analysis

Communication skills

Problem-solving

Collaboration

NIST CSF knowledge

Education

Bachelor's degree

Job description

Campus

OSU-Stillwater

Contact Name & Email

Marjorie McLagan, [e-mail]

Work Schedule

Monday through Friday, 8:00am-5:00pm with occasional evenings and weekends.

Appointment Length

Regular Continuous/Until Further Notice

Hiring Range

$55,000 - $70,000

Special Instructions to Applicants

For full consideration, please include a resume, cover letter and contact information for three professional references.

About this Position

The Cybersecurity Analyst II provides professional and technical expertise to support enterprise technology services, ensuring alignment with OSU/A&M System goals, compliance requirements, and departmental priorities. This position is responsible for performing specialized operational, technical, or analytical tasks within the assigned domain.

This position operates within OSU Information Technology and Information Security Services (ISS) and contributes to the Security Operations Center (SOC) and/or Governance, Risk, and Compliance (GRC) functions across the OSU A&M System. Responsibilities span academic, research, healthcare, and administrative environments and require coordination across multiple campuses, business units, and stakeholders. The role contributes to the protection of institutional information assets, performs moderately complex operational and analytical work, may lead defined projects or workstreams, and collaborates with stakeholders to support the confidentiality, integrity, and availability of institutional systems and data while escalating complex or enterprise-wide issues through appropriate channels.

Institutional Scope:

• Provides enterprise cybersecurity support for the OSU A&M System.
• Operates with a system-wide perspective rather than a single-campus focus.
• Supports enterprise incident response, risk mitigation, regulatory compliance, and cybersecurity service maturity obligations.
• Collates with ISS staff, central IT, distributed IT units, campus stakeholders, business units, institutional partners, and service teams to support system-wide cybersecurity objectives.

Required Qualifications

• Bachelor's (degree must be conferred on or before agreed upon start date)
• • In addition to a bachelors degree, two (2) years of experience in an information technology-related field, such as customer support, technical support, systems administration, networking, or similar technical roles.
  • Demonstrated ability to support enterprise-scale IT or security environments and perform assigned responsibilities independently within established processes.
• Education and Experience Substitutions:
  • Post-secondary education may substitute for required experience. As a general guideline, one (1) year of full-time experience equals one (1) year of post-secondary education.
  • A master's degree may substitute for up to two (2) years of the required experience.
  • Additional post-secondary education may be substituted for required experience on a year-for-year basis, where one (1) year of full-time post-secondary education equals one (1) year of full-time professional experience

Skills, Proficiencies, and/or Knowledge:

Demonstrated ability to independently perform cybersecurity analysis and operational tasks within defined service areas; ability to analyze and resolve routine to moderately complex issues; ability to support or lead defined operational activities or workstreams; ability to communicate effectively in verbal and written form; ability to explain technical security concepts to technical and non-technical audiences; demonstrated discretion and sound judgment when handling sensitive or confidential information; and working knowledge of foundational security concepts, vulnerabilities, controls, and mitigation practices.

Preferred Qualifications

• Bachelor's

  Computer Science, Information Technology, Cybersecurity, Information Systems, or a closely related field.

• Experience supporting enterprise cybersecurity operations, vulnerability management, incident response support, risk assessment activities, compliance support, service documentation, or coordination across multiple IT teams, campuses, or business units in a higher education, research, healthcare, or similarly complex environment.

Certifications, Registrations, and/or Licenses:

CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Cisco Certified Network Associate (CCNA), GIAC or other SANS-affiliated cybersecurity certifications, or equivalent industry-recognized security certifications.

Skills, Proficiencies, and/or Knowledge:

Strong analytical and problem-solving skills with the ability to manage routine to moderately complex security issues independently; ability to prioritize and execute work in dynamic or high-pressure environments; ability to communicate risk, findings, and recommendations clearly to technical and non-technical stakeholders; strong collaboration skills; experience providing guidance or knowledge sharing to less experienced analysts or student employees; working knowledge of security vulnerabilities, threat mitigation techniques, enterprise security controls, and the NIST Cybersecurity Framework.