Information Security Administrator

University of Chicago; Chicago (IL); Hybrid; USD 80,000 - 115,000; Full time

Job summary

The Information Security Administrator at the University of Chicago Booth School of Business protects the organization’s information systems, applications, and data assets. This position administers security technologies, supports governance and compliance initiatives, and monitors security events.

Working closely with IT leadership, system owners, and business stakeholders, the role helps ensure confidentiality, integrity, and availability of institutional data and technology resources, and

Qualifications

• College or university degree in a related field.
• 5–7 years of work experience in a related IT security discipline.
• Security+ certification or an equivalent industry-recognized security certification.
• Hands-on information security experience in an enterprise environment.
• Experience analyzing security events and recommending corrective actions.

Responsibilities

• Administers, monitors, and maintains information security technologies (endpoint protection, vulnerability management, security monitoring, encryption, MFA, IAM).
• Protects systems and applications that store, process, or transmit sensitive data (HIPAA, PII, FERPA).
• Implements and maintains IAM controls and least-privilege access.
• Monitors security alerts, investigates threats, coordinates remediation.
• Conducts security assessments, vulnerability reviews, and configuration audits.

Skills

Data security

Cybersecurity principles

Identity management

Education

Bachelor's degree

Degree in information technology / cybersecurity

Job description

Department

Booth Information Technology

About the Department

The University of Chicago Booth School of Business is the second-oldest business school in the U.S. and second to none when it comes to influencing business education and business practices. Since 1898, the school has produced ideas and leaders that shape the world of business. Their rigorous, discipline-based approach to business education transforms students into confident, effective, respected business leaders prepared to face the toughest challenges.

Chicago Booth has the finest set of facilities of any business school in the world. Each of the four campuses (two in Chicago, one in London, and one in Hong Kong) reflects the architectural traditions of its environs while offering a state-of-the-art learning environment.

Chicago Booth is proud to claim:

• an unmatched faculty.
• degree and open enrollment programs offered on three continents.
• a global body of nearly 56,000 accomplished alumni.
• strong and growing corporate relationships that provide a wealth of lifelong career opportunities.

As part of the world-renowned University of Chicago, Chicago Booth shares the University’s core values that shape the distinctive intellectual culture. At Booth, they constantly question and test ideas, and seek proof. This extraordinarily effective approach to business leads to new ideas and innovative solutions. Seven of the Booth faculty members have won Nobel Prizes for these ideas - the first business school to achieve this accomplishment.

For more information about the University of Chicago Booth School of Business, please visit: http://www.chicagobooth.edu/.

Job Summary

The Information Security Administrator plays a key role in protecting the organization’s information systems, applications, and data assets. This position is responsible for administering security technologies, supporting governance and compliance initiatives, monitoring and responding to security events, and implementing controls that reduce organizational risk. Working closely with IT leadership, system owners, and business stakeholders, the Information Security Administrator helps ensure the confidentiality, integrity, and availability of institutional data and technology resources.

Responsibilities

• Administers,monitors, andmaintainsinformation security technologies, including endpoint protection, vulnerability management, security monitoring, encryption, multi-factor authentication, and identity and access management solutions.
• Protects systems and applications that store, process, ortransmitsensitive and regulated data, including HIPAA, PII, FERPA, and other confidential information.
• Implements andmaintainsidentity and access management controls, role-based access models, and least-privilege access practices.
• Monitors security alerts, investigates potential threats, and coordinates remediation activities to mitigate organizational risk.
• Conducts security assessments, vulnerability reviews, and configuration audits toidentifyand address security weaknesses.
• Analyzes security incidents,determinesroot causes, and supports containment, recovery, and corrective action efforts.
• Supports the development, implementation, and maintenance of information security policies, standards, procedures, and best practices.
• Participates in risk assessments, control evaluations, and remediation planning to strengthen the organization’s security posture.
• Assistswith compliance initiatives, audits, regulatory reviews, and security assessments aligned with applicable laws, regulations, and industry frameworks.
• Maintains security documentation, reports, and records to support compliance, audit readiness, and operational effectiveness.
• Supports business continuity, disaster recovery, and incident response planning and testing activities.
• Collaborates with IT teams, system owners, and business stakeholders to implement security controls and mitigate risk.
• Provides guidance on secure system design, implementation, configuration, and change management practices.
• Leads teams to conduct in-depth information technology risk assessments; makes recommendations and designs improvements to IT security procedures.
• Guides communications with users to understand their security needs and supports the implementation of procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Performs other related work as needed.

Minimum Qualifications

Education:

Minimum requirements include a college or university degree in related field.

Work Experience:

Minimum requirements include knowledge and skills developed through 5-7 years of work experience in a related job discipline.

Certifications:

—

Preferred Qualifications

Education:

• Bachelor’s degree.
• Degree preferably in information technology, computer science, cybersecurity, or a related field.

Experience:

• Hands-on information security experience in an enterprise environment.
• Background analyzing security events,identifyingroot causes, and recommending corrective actions.

Certifications:

• Security+ certification or an equivalent industry-recognized security certification.
• Advanced certifications.

Technical Skills or Knowledge:

• Proficient at securing systemscontainingsensitive or regulated data, including HIPAA, PII, FERPA, or similar data classifications.
• Working knowledge of cybersecurity principles, access control methodologies, identity management, and security operations practices.

Preferred Competencies

• Strong analytical, troubleshooting, and problem-solving skills strongly preferred.
• Effective written, verbal, and interpersonal communication skills.

Working Conditions

• This position is currently expected to work a minimum three days per week in the office.

Application Documents

• Resume/CV (required)
• Cover Letter (required)

Job Family

Information Technology

Role Impact

Individual Contributor

Scheduled Weekly Hours

37.5

Drug Test Required

No

Health Screen Required

No

Motor Vehicle Record Inquiry Required

No

Pay Rate Type

Salary

FLSA Status

Exempt

Pay Range

$80,000.00 - $115,000.00

The included pay rate or range represents the University’s good faith estimate of the possible compensation offer for this role at the time of posting.

Benefits Eligible

Yes

The University of Chicago offers a wide range of benefits programs and resources for eligible employees, including health, retirement, and paid time off. Information about the benefit offerings can be found in the Benefits Guidebook.

Posting Statement

The University of Chicago is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender, gender identity, or expression, national or ethnic origin, shared ancestry, age, status as an individual with a disability, military or veteran status, genetic information, or other protected classes under the law. For additional information please see the University’s Notice of Nondiscrimination.

Job seekers in need of a reasonable accommodation to complete the application process should call 773-702-5800 or submit a request via Applicant Inquiry Form.

All offers of employment are contingent upon a background check that includes a review of conviction history. A conviction does not automatically preclude University employment. Rather, the University considers conviction information on a case-by-case basis and assesses the nature of the offense, the circumstances surrounding it, the proximity in time of the conviction, and its relevance to the position.

The University of Chicago’s Annual Security & Fire Safety Report (Report) provides information about University offices and programs that provide safety support, crime and fire statistics, emergency response and communications plans, and other policies and information. The Report can be accessed online at: http://securityreport.uchicago.edu. Paper copies of the Report are available, upon request, from the University of Chicago Police Department, 850 E. 61st Street, Chicago, IL 60637.