IT Security Professional - 2

UNC Finance and Operations; Chapel Hill (NC); On-site; USD 120,000 - 190,000; Full time

Job summary

UNC Finance and Operations IT seeks a senior IT Security Professional to serve as a subject matter expert and escalation resource. You will plan, implement, and manage secure, high-performance IT infrastructure and systems, spanning information security, server and database administration, and network architecture.

You will lead security monitoring, incident response, and disaster recovery planning, while guiding policies and best practices across university units.

Qualifications

• Extensive expertise in information security across networks, servers, and apps.
• Strong experience with security policies, risk management, and governance.
• Proven ability to lead incidents, investigations, and root-cause analyses.
• Experience planning and delivering secure, scalable IT architectures.

Responsibilities

• Plan, implement, and manage secure, high-performance IT infrastructure.
• Design and maintain network security architecture to protect data.
• Deploy and monitor security monitoring tools and dashboards.
• Direct forensic analysis, incident response, and recovery efforts.
• Develop security policies and procedures aligning with university and regs.
• Lead IT projects from initiation to completion with safeguards.
• Collaborate with admins and stakeholders to improve workflows.
• Participate in disaster recovery and business continuity planning.
• Provide expert consultation on secure operations and change mgmt.

Skills

Information security

Server administration

Database administration

Network architecture

Incident response

IT project management

Education

Bachelor's degree in CS/IS or related field

CISSP/CISM or equivalent certification a plus

Tools

SIEM

Forensics

Job description

The IT Security Professional is a senior-level technical position within Finance and Operations IT (FOIT) at the University of North Carolina at Chapel Hill. This position serves as a subject matter expert and primary escalation resource responsible for the planning, implementation, and ongoing management of secure, high-performance information technology infrastructure and systems. This role requires advanced and broad expertise spanning information security, server and database administration, network architecture, web application development, and IT project management. The IT Security Professional leads efforts to protect University systems and data by designing and maintaining network security architecture, deploying and managing security monitoring tools, directing forensic analysis and incident response, and establishing security policies and procedures in compliance with applicable University, state, and federal requirements. The position serves as a critical escalation resource, supporting peers, ITS management, and departmental units in resolving complex technical incidents and security events. The IT Security Professional actively participates in security policy and planning decisions and provides expert consultation to departmental computing organizations on secure operations, change management processes, segregation of duties, and coding best practices. Additional responsibilities include managing IT projects from initiation through completion, ensuring systems that handle sensitive or restricted data are delivered on schedule, within scope, and with appropriate safeguards. The position collaborates with administrators and stakeholders to assess technology needs, recommend solutions, and drive continuous improvement of IT systems and workflows. The IT Security Professional also plays a central role in disaster recovery and business continuity planning and contributes to ongoing monitoring, reporting, and enhancement of the unit's overall security posture. This position requires strong analytical, communication, and problem-solving skills and the ability to work effectively across organizational units in a complex university environment. Some after-hours availability may be required to respond to security incidents or to implement planned system changes with minimal service disruption.