Security Analyst II / Information Technologist II

MSU - Michigan State University; East Lansing (MI); Hybrid; USD 70,000 - 95,000; Full time

Benefits offered by this job

Health care

Dental coverage

Educational benefits

Job summary

Michigan State University (MSU) is seeking a Security Analyst II to support governance, risk, and compliance efforts and help implement security controls across campus. The role involves assessments, incident response support, and guidance to units on cybersecurity best practices.

The position is hybrid, requiring at least two on-campus days, with MSU offering a comprehensive benefits package and educational opportunities.

Qualifications

• Four-year degree and 3–5 years in IT, risk, or compliance.
• Experience in security administration and operations is a plus.
• Knowledge of risk management processes and cyber threats.
• Ability to interface with customers.

Responsibilities

• Assist with security assessments and document controls.
• Support incident response activities and investigations.
• Provide guidance to campus units on cybersecurity best practices.
• Ensure consistent application of MSU security policies and standards.

Skills

Risk management

Cyber threats

Incident response

Security resilience

CIA triad

Interfacing with customers

Education

Bachelor's degree

Certifications (Security+, CISSP, CISA, CISM, CRISC, CSX-P)

Job description

Working/Functional Title

Security Analyst II

Position Summary

Reporting to and supporting the Governance, Risk, and Compliance (GRC) Manager, the Security Analyst II plays a key role in implementing MSU’s cybersecurity governance and risk processes. This position assists with security assessments, evaluates and documents security controls, supports incident response activities, and provides guidance to campus units on cybersecurity best practices. The Security Analyst II helps ensure consistent application of MSU’s security policies, standards, and procedures and contributes to the continuous improvement of enterprise security operations.

Note: This position is hybrid and requiresat least 2days of workon campus.

Michigan State University (MSU) is ranked #30 among public universities and #63 overall in U.S. News & World Report’s America’s Best Colleges 2025. Located in East Lansing, three miles east of the state’s capitol, the MSU community includes more than 12,000 faculty, academic and support staff, as well as over 51,000 students. MSU offers an extensive benefits package to its employees including health care, prescription, and dental coverage, and a base retirement program with a University matching contribution, as well as basic life insurance. In addition, MSU offers educational benefits including a course fee courtesy program and educational assistance.

MSU Information Technology provides the primary leadership for strategic, financial, and policy initiatives affecting information technology (IT) across MSU. MSU IT offers technology resources that support MSU’s mission of providing education, conducting research, and advancing engagement.

Minimum Requirements

Knowledge equivalent to that which normally would be acquired by completing a four-year college degree program; three to five years of related and progressively more responsible or expansive work experience in information technology, risk, and/or compliance; or security administration and operations, or an equivalent combination of education and experience.

Desired Qualifications

• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk), and knowledge of cyber threats and vulnerabilities.
• Knowledge of host/network access control mechanisms (e.g., access control list, capabilities lists), and of network services and protocols interactions that provide network communications.
• Knowledge of incident response and handling methodologies.
• Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• Skill in discerning the protection needs (i.e., security controls) of information systems and networks, including how the CIA triad may apply.
• Skill in interfacing with customers
• Certification(s) or study in an area of information assurance or risk management are considered a plus (e.g., Security+; CISSP; CISA; CISM; CRISC; CSX-P) Other certifications from credentialling bodies such as: ISACA; (ISC)2; SANS GIAC; CompTIA; EC-Council, or even network/security/system vendors will also be considered.

Equal Employment Opportunity Statement

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, citizenship, age, disability or protected veteran status.

Required Application Materials

Resume and cover letter

Special Instructions

Please provide three professional references who are knowledgeable of your work.

Work Hours

STANDARD 8-5

Website

https://tech.msu.edu

Remote Work Statement

MSU strives to provide a flexible work environment, and this position has been designated as remote-friendly. Remote-friendly means some or all of the duties can be performed remotely as mutually agreed upon.

Bidding eligibility ends September 15, 2026, at 11:55 PM