Cybersecurity Specialist

University of Washington; Seattle (WA); Ibrido; USD 103.000 - 150.000; Tempo pieno

Descrizione del lavoro

University of Washington Information Technology is seeking a Cybersecurity Specialist to join our Seattle team. You will manage institutional information security risk, support secure research computing, and partner with cross-functional teams to architect and deliver security solutions aligned with UW missions and regulatory requirements.

The role emphasizes risk assessment, stakeholder communication, and guidance on risk management across regulated environments, including developing SSPs and

Competenze

• Bachelor's degree in Computer Science, Cybersecurity, Engineering or a related field, or equivalent experience.
• Four years of relevant experience in a large enterprise environment.
• Strong written, verbal and listening skills to communicate with technical and non-technical audiences.
• Deductive reasoning, critical thinking and problem-solving abilities.
• Strong interpersonal skills to influence, motivate, persuade, mentor and train diverse groups.
• Ability to architect and deliver actionable information security solutions.
• Ability to conceptualize new ideas and handle complex technical matters quickly.
• Ability to work with diverse constituencies and build consensus.
• Ability to work independently with minimal supervision.

Mansioni

• Partner with cross-functional teams to architect and deliver information security solutions aligned with UW goals and regulatory requirements.
• Conduct risk assessments of complex systems and communicate remediation strategies to decision makers.
• Guide university organizations to manage risk and develop an information security strategy; maintain SSPs/POA&M and audit evidence.
• Provide information security input for vendor product risk assessments and third-party risk reviews.
• Stay up to date with threats and technologies via online and in-person security events.
• Offer security advice across the University for compliance and best practices.
• Contribute to information security incident response and analysis, including investigations in research computing.
• Develop repeatable workflows and knowledge-based articles.
• Participate in ongoing information security outreach activities.

Conoscenze

Strong written/verbal/listening skills

Deductive reasoning

Interpersonal skills

Architect information security

Independent work

Communicate with non-technical

Formazione

Bachelor's degree in Computer Science, Cybersecurity, Engineering or related field

Descrizione del lavoro

Seattle, WA

Full time

REQ-0000138606

Job Description

UW Information Technology (UW-IT) has an outstanding opportunity for Cybersecurity Specialist to join their team.

About this Opportunit y

Reporting to Director of Risk Management Services, the Cybersecurity Specialist is responsible for managing institutional information security risk and support secure research computing across the University. The Cybersecurity Specialist partners cross-functionally to architect and deliver security solutions, communicates risk to technical and non-technical audiences, and supports compliance for regulated research (NIST 800-171, CMMC, DFARS). The role advances the division's mission of proactively assessing and managing information security risk in partnership with executive management, UW departments, and academic partners, with particular emphasis on secure cloud and research computing environments.

Key Responsibilitie s

1. 
   

   Partner with cross-functional teams to architect and deliver information security solutions that strategically align with current UW mission and goals along with applicable regulatory requirements, including supporting research activities, and evaluating emerging cloud services and security technologies. (30%)

   
   


2. 
   

   Conduct risk assessments of complex systems to identify, and track, exploitable vectors and communicate effective remediation strategies to decision makers. (25%)

   
   


3. 
   

   Act as SME (Subject Matter Expert) and guide university organizations to manage their risk and promote their development and implementation of an information security strategy. Where appropriate, enter qualifying findings into the risk registry and prepare reports that are ultimately shared with executive management. Also coordinates security and compliance assessments for research computing environments, and helps develop, reviews, and maintains System Security Plans (SSPs), POA&M, and audit evidence supporting NIST 800-171, CMMC, and DFARS assessments for regulated research systems. (10%)

   
   


4. 
   

   Provide information security expertise as part of vendor product risk assessments to help secure UW systems, including risk reviews of third-party tools and vendors used in research workflows. (10%)

   
   


5. 
   

   Stay up to date with current threats, risks, vulnerabilities, and relevant technologies via both online presentations and in-person security conferences. (5%)

   
   


6. 
   

   Provide general advice and assistance on topics relating to information security issues that impact higher education, including providing consultation for compliance and security requirements across a broad area of the University and serving as a technical resource for researchers and technical staff on security best practices. (5%)

   
   


7. 
   

   Contribute to information security incident response and analysis, as needed, including security incident investigations involving research computing environments, with appropriate risk analysis and actionable security solutions for mitigation. Review and evaluate proposed data classification (e.g., CUI), access control, encryption configurations, and security architecture/design decisions (e.g., control selection, network segmentation, trust boundaries) for research computing and cloud environments against required security baselines, and provide findings and recommendations to system engineers. (5%)

   
   


8. 
   

   Participate in ongoing information security outreach activities. (5%)

   
   


9. 
   

   Perform other duties as assigned, including developing and documenting repeatable workflows and knowledge-based articles. (5%)

   
   

Required Qualifications

To be considered for this opportunity your application must demonstrate you meet both the minimum qualifications and additional qualifications listed below. Equivalent education and/or experience may substitute for minimum qualifications except when there are legal requirements, such as a license, certification, and/or registration.

Minimum Qualifications

• Bachelors degree in Computer Science, Cybersecurity, Engineering or a related field or experience


• Four years of relevant experience and progressive responsibility working in a consultative capacity in a large enterprise environment.


• Strong written, verbal, and listening skills to effectively communicate with and provide consultation to technical and non-technical audiences.


• Deductive reasoning, critical thinking, problem solving skills.


• Strong interpersonal skills to influence, motivate, persuade, mentor and train diverse groups or individuals.


• Ability to architect and deliver actionable information security solutions.


• Ability to conceptualize new ideas and complex technical matters quickly.


• Ability to work with a diverse constituency, in collaborative groups, building consensus and fostering ongoing relationships.


• Ability to work independently with minimal supervision.

Applicants who do not meet these qualifications WILL NOT be forwarded to the Hiring Manager.

Preferred Qualifications

• Experience with information security in higher education is preferred


• Professional certification is preferred (e.g., CISSP, CISA, CEH, GPEN, GSNA, GCIH, etc.) Cloud/compliance certifications are also relevant (e.g., AWS, Security+, CCSP).


• Experience supporting secure research computing, high-performance computing (HPC), or scientific computing environments.


• Experience with security assessments, vulnerability management, or security operations.


• Experience supporting or implementing security controls, risk management, or compliance frameworks, including NIST 800-171, CMMC, and DFARS requirements for regulated research environments.

Working Conditions

Hybrid, open office environment.

About the Team

UWIT is the University of Washington’s central IT organization, supporting all three campuses, UW medical centers, and global research. We partner across the University to power teaching, learning, innovation, and discovery. We are here to serve UW.

Information Security within UWIT, supports a secure digital environment for research, learning, and discovery by strengthening the University’s ability to manage risk and respond to threats. Our work supports secure, compliant, and resilient technology operations, building trust in how UW stewards personal and institutional data.

Our program is grounded in NIST standards, using the NIST Cybersecurity Framework and related Special Publications as the foundation for how we approach security, privacy, and risk management.

Compensation, Benefits and Position Details

Pay Range Minimum:

$102,612.00 annual

Pay Range Maximum:

$150,000.00 annual

Other Compensation:

-

Benefits:

For information about benefits for this position, visit https://www.washington.edu/jobs/benefits-for-uw-staff/

Shift:

First Shift (United States of America)

Temporary or Regular?

This is a regular position

FTE (Full-Time Equivalent):

100.00%

Union/Bargaining Unit:

Not Applicable

About the UW

Working at the University of Washington provides a unique opportunity to change lives – on our campuses, in our state and around the world.

UW employees bring their boundless energy, creative problem-solving skills and dedication to building stronger minds and a healthier world. In return, they enjoy outstanding benefits, opportunities for professional growth and the chance to work in an environment known for its diversity, intellectual excitement, artistic pursuits and natural beauty.

Our Commitment

The University of Washington is committed to fostering an inclusive, respectful and welcoming community for all. As an equal opportunity employer, the University considers applicants for employment without regard to race, color, creed, religion, national origin, citizenship, sex, pregnancy, age, marital status, sexual orientation