InfoSec Risk Analyst II — Protect Campus Data & Privacy

University of Minnesota; Minneapolis (MN); Hybrid; USD 85,000 - 95,000; Full time

Benefits offered by this job

Retirement contribution

Vacation days

Tuition assistance

Health benefits

Wellness program

Disability insurance

Merit increase

Job summary

University of Minnesota's University Information Security is seeking an Information Security Risk Analyst to enhance the university's security posture through risk assessments, standards development, and exception management.

You will evaluate the information security posture of colleges and administrative units, analyze controls, and help shape a risk-based security program across the entire University system, collaborating with diverse stakeholders.

Qualifications

• Bachelor's degree in a related field and 2 years of relevant work experience or a Master's degree.
• 1 year experience in information security risk assessment, audit, quality assurance, or similar.
• Excellent communication (oral, written, presentation), interpersonal and consultative skills.

Responsibilities

• Conduct information security assessments utilizing ISO 27001 / 27002, NIST 800-171 or other appropriate information security control structures; develop risk remediation plans, and facilitate risk remediation efforts.
• Facilitate the information security risk management program by identifying areas most in need of risk assessment, coordinating risk assessments with other information security risk analysts, and consulting with information security architects.
• Monitor and advise on information security needs for systems and processes at the University of Minnesota to ensure the information security controls for the campuses are consistent and appropriate.
• Consult with administrative and collegiate units to address policy and process‑related information security risks identified through the information security risk and exception management programs.
• Collaborate with stakeholders by translating complex technical vulnerabilities and control deficiencies into clear, business‑risk language for non‑technical academic and administrative leaders.
• Assist with development and maintenance of information security policies, standards, guidelines and procedures, based on industry best practices and compliance requirements.
• Maintain a strong working knowledge of regulatory frameworks impacting higher education, including GLBA, PCI and FERPA while building knowledge of applicable security standards (SANS, OWASP, NIST).

Skills

Information security risk assessment

Communication skills

Consultative skills

Education

Bachelor's degree in a related field

Master's degree

Job description

University of Minnesota's University Information Security is seeking an Information Security Risk Analyst to enhance the university's security posture through risk assessments, standards development, and exception management.

You will evaluate the information security posture of colleges and administrative units, analyze controls, and help shape a risk-based security program across the entire University system, collaborating with diverse stakeholders.