InfoSec Risk Analyst II — Protect Campus Data & Privacy

University of Minnesota; Minneapolis (MN); Híbrido; USD 85.000 - 95.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Retirement contribution

Vacation days

Tuition assistance

Health benefits

Wellness program

Disability insurance

Merit increase

Descripción de la vacante

University of Minnesota's University Information Security is seeking an Information Security Risk Analyst to enhance the university's security posture through risk assessments, standards development, and exception management.

You will evaluate the information security posture of colleges and administrative units, analyze controls, and help shape a risk-based security program across the entire University system, collaborating with diverse stakeholders.

Formación

• Bachelor's degree in a related field and 2 years of relevant work experience or a Master's degree.
• 1 year experience in information security risk assessment, audit, quality assurance, or similar.
• Excellent communication (oral, written, presentation), interpersonal and consultative skills.

Responsabilidades

• Conduct information security assessments utilizing ISO 27001 / 27002, NIST 800-171 or other appropriate information security control structures; develop risk remediation plans, and facilitate risk remediation efforts.
• Facilitate the information security risk management program by identifying areas most in need of risk assessment, coordinating risk assessments with other information security risk analysts, and consulting with information security architects.
• Monitor and advise on information security needs for systems and processes at the University of Minnesota to ensure the information security controls for the campuses are consistent and appropriate.
• Consult with administrative and collegiate units to address policy and process‑related information security risks identified through the information security risk and exception management programs.
• Collaborate with stakeholders by translating complex technical vulnerabilities and control deficiencies into clear, business‑risk language for non‑technical academic and administrative leaders.
• Assist with development and maintenance of information security policies, standards, guidelines and procedures, based on industry best practices and compliance requirements.
• Maintain a strong working knowledge of regulatory frameworks impacting higher education, including GLBA, PCI and FERPA while building knowledge of applicable security standards (SANS, OWASP, NIST).

Conocimientos

Information security risk assessment

Communication skills

Consultative skills

Educación

Bachelor's degree in a related field

Master's degree

Descripción del empleo

University of Minnesota's University Information Security is seeking an Information Security Risk Analyst to enhance the university's security posture through risk assessments, standards development, and exception management.

You will evaluate the information security posture of colleges and administrative units, analyze controls, and help shape a risk-based security program across the entire University system, collaborating with diverse stakeholders.