Information Security Professional II

ucf; Orlando (FL); On-site; USD 65,000 - 80,000; Full time

Job summary

University of Central Florida (UCF) is seeking an Information Security Professional II to enhance cybersecurity and compliance programs. The role will assess risk, monitor compliance, manage VRM, and conduct security assessments while promoting best practices across the university.

You will collaborate with departments and technology partners to identify vulnerabilities, mitigate risks, and improve the university's security posture. On-site work and a competitive salary are provided.

Qualifications

• Bachelor's degree or equivalent with 2+ years of relevant experience, or high school diploma with 6+ years of relevant experience.
• Experience with vendor risk management programs or assessments is preferred.
• Knowledge of security frameworks and standards (NIST, CIS Controls, ISO 27001, FERPA, HIPAA, PCI-DSS) is advantageous.

Responsibilities

• Monitor compliance with information security policies, standards and laws.
• Develop and promote information security policies, standards, and best practices.
• Manage the University's Vendor Risk Management program and conduct vendor reviews.
• Assess security and compliance risks across colleges and units; recommend corrective actions.
• Perform risk assessments, compliance reviews, vulnerability analyses, and security evaluations.

Skills

Information security

Risk assessment

Compliance

Vendor risk management

Security governance

Security monitoring

Education

Bachelor's degree

High School Diploma

Job description

University Operations: The University Operations division at UCF is committed to creating a supportive and welcoming environment for our faculty, staff, students, and the broader community. We take pride in delivering exceptional service, sharing our expertise, and upholding the highest standards to ensure a world-class campus experience.

Visit our website or follow us on Facebook and Instagram to learn more.

The Opportunity: University Operations is seeking to hire an Information Security Professional II. This role will support and strengthen the institution's cybersecurity and compliance program. This position plays a critical role in safeguarding university information assets by assessing risk, monitoring compliance, managing vendor risk reviews, conducting security assessments, and promoting information security best practices across the organization. The successful candidate will collaborate with departments, business units, and technology partners to identify vulnerabilities, mitigate risks, and enhance the University's overall security posture.

Responsibilities:

• Monitor compliance with university information security policies, standards, regulatory requirements, contractual obligations, and applicable laws.
• Develop, maintain, and promote information security policies, standards, guidelines, and best practices.
• Manage and administer the University's Vendor Risk Management (VRM) program, including conducting vendor security reviews and assessments.
• Partner with colleges, departments, and business units to evaluate security and compliance risks and recommend corrective actions.
• Perform risk assessments, compliance reviews, vulnerability analyses, and security evaluations of existing and proposed technology solutions.
• Analyze security findings and communicate recommendations to stakeholders to improve security posture and reduce risk.
• Track remediation activities and verify implementation of required security patches, configurations, and corrective actions.
• Monitor vulnerability scans, security assessments, system configurations, and relevant security information to identify potential risks.
• Coordinate and track mitigation and remediation efforts across technical and business teams.
• Utilize automated and manual assessment techniques to identify, validate, and evaluate security vulnerabilities.
• Research emerging cybersecurity threats, tools, and industry best practices to strengthen the University's security program.
• Conduct compliance activities and security reviews to ensure adherence to established security objectives and standards.
• Promote a culture of security awareness while maintaining productive partnerships and delivering exceptional customer service.

Minimum Qualifications:

• Bachelor's degree and 2 years of relevant experience; or High School Diploma (or equivalent) and 6 years of relevant work experience in lieu of degree; or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6) .

Preferred Qualifications :

• Experience managing or participating in Vendor Risk Management (VRM) programs.
• Experience conducting security assessments, vulnerability reviews, and compliance audits.
• Knowledge of security frameworks and standards such as NIST, CIS Controls, ISO 27001, FERPA, HIPAA, or PCI-DSS.
• Experience working within higher education, government, or large complex organizations.
• Professional certifications such as Security+, CISSP, CISM, CISA, CRISC, or related credentials.
• Experience with vulnerability management and security monitoring tools.

Special Instructions to the Applicants:

Position requires a valid Class E driver's license. This position may involve driving to various locations on and off campus to conduct University business.

The anticipated salary range for this position is $64,518 - $80,000. The final salary will be determined based on the candidate's qualifications, experience, and internal equity considerations.

All applicants must be authorized to work for any U.S. employer. Visa sponsorship is not available for this position, and the university cannot accommodate H‑1B transfers or employment-based visa processing for individuals currently sponsored by another employer.

This role requires the successful candidate to work on-site at UCF as their primary work location. On‑site presence is an essential function of this role.

Are you ready to unleash YOUR potential?

As a next-generation public research university and Forbes-ranked top employer in Florida, we are a community of thinkers, doers, creators, innovators, healers, and leaders striving to create broader prosperity and help shape a better future. No matter what your role is, when you join Knight Nation, you'll play an integral role at one of the most impactful universities in the country. You'll be met with opportunities to connect and collaborate with talented faculty, staff, and students across 12 colleges and multiple campuses, engaging in impactful work that makes a positive difference.