Information Security Specialist-Analyst II/Information Solutions

Medical University of South Carolina; South Carolina; On-site; USD 78,000 - 110,000; Full time

Job summary

Medical University of South Carolina seeks an Information Security Specialist - Analyst II to advance governance, risk, and compliance across the university's academic, research, and healthcare missions. You will work with stakeholders to deliver recurring outputs and improve control activities.

You will translate control requirements into actionable guidance, support remediation tracking, and help safeguard confidentiality, integrity, and availability of information assets in a complex

Qualifications

• Bachelor’s degree or equivalent work experience, required.
• At least three (3) years of cybersecurity, compliance or audit experience.
• Role-relevant certification such as Security+, CySA+, SSCP, CRISC Associate, CISA Associate, Microsoft SC-900, or equivalent.

Responsibilities

• Apply established methods to moderately complex governance, risk management, compliance, and operational issues.
• Coordinate with technical and business stakeholders and own recurring deliverables, reporting, and follow-up activities.
• Improve the accuracy, timeliness, and completeness of GRC and field operations outputs.
• Translate control requirements into actionable guidance and support remediation tracking.
• Help protect confidentiality, integrity, and availability of organizational information assets.

Skills

Control evidence review

Risk & compliance records

Audits or assessments

Established methods application

Stakeholder coordination

GRC tools

Documentation & reporting

Communication skills

Independent work

Education

Bachelor's degree

Job description

Job Description Summary

The Information Security Specialist - Analyst II applies established methods to moderately complex governance, risk management, compliance, and operational issues. Working with indirect supervision, the position coordinates with technical and business stakeholders and owns recurring deliverables, reporting, and follow-up activities. The role improves the accuracy, timeliness, and completeness of GRC and field operations outputs, translates control requirements into actionable guidance, supports remediation tracking, and helps protect the confidentiality, integrity, and availability of organizational information assets in support of MUSC’s academic, research, and healthcare missions.

Entity

MUSC Community Physicians (MCP)

Worker Type

Employee

Worker Sub-Type

Regular

Cost Center

CC006134 MCP - Information Solutions

Pay Rate Type

Salary

Pay Grade

Health-28

Scheduled Weekly Hours

40

Work Shift

Job Description

The Information Security Specialist - Analyst II applies established methods to moderately complex governance, risk management, compliance, and operational issues. Working with indirect supervision, the position coordinates with technical and business stakeholders and owns recurring deliverables, reporting, and follow-up activities. The role improves the accuracy, timeliness, and completeness of GRC and field operations outputs, translates control requirements into actionable guidance, supports remediation tracking, and helps protect the confidentiality, integrity, and availability of organizational information assets in support of MUSC’s academic, research, and healthcare missions.

Skills

• Hands-on experience collecting and reviewing control evidence, maintaining risk and compliance records, and supporting audits or assessments.
• Ability to apply established methods to moderately complex control, compliance, risk, and operational issues with limited direction.
• Strong analytical and problem-solving skills, including risk assessment, gap analysis, exception documentation, and remediation tracking.
• Working knowledge of applicable frameworks and requirements, such as ISO 27000, HIPAA/HITECH, FERPA, PCI DSS, NIST Cybersecurity Framework, and NIST SP 800-53.
• Ability to coordinate field operations requests, recurring deliverables, reporting, and follow-up activities across technical and business stakeholders.
• Strong written and verbal communication skills, including translating control requirements and technical findings into actionable stakeholder guidance.
• Experience with GRC tools, documentation and ticketing workflows, compliance tracking systems, and stakeholder reporting.
• Ability to work independently, manage competing priorities, and improve the accuracy, timeliness, and completeness of assigned outputs.

Additional Job Description

Requirements (Education, Experience, Licensure, Registry, Certification)

Education

Education: Bachelor’s degree, or equivalent work experience, required.

Experience

Experience: At least three (3) years of experience in cybersecurity, compliance or audit, technology operations, or related business functions. Hands-on experience should include collecting and reviewing control evidence, maintaining risk or compliance records, supporting audits or assessments, coordinating field operations requests, documenting exceptions, and tracking remediation actions.

Certification

Certification: Role-relevant certification required, such as Security+, CySA+, SSCP, CRISC Associate, CISA Associate, Microsoft SC-900, or an equivalent cybersecurity certification.

Preferred qualifications

Preferred qualifications: Strong familiarity with compliance requirements affecting academic medical centers; knowledge of NIST Cybersecurity Framework and NIST SP 800-53; experience conducting risk assessments in healthcare or higher education; proficiency with GRC platforms and compliance tracking systems; or additional advanced role-relevant certification.

If you like working with energetic enthusiastic individuals, you will enjoy your career with us!

The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need.

Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: http://www.uscis.gov/e-verify/employees