Senior Information Security Analyst

COLLEGE CORNER; Charleston (SC); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Employee Tuition Assistance Program ( 

ETAP

Job summary

College of Charleston seeks a Senior Information Security Analyst to design, implement, and oversee security solutions across campus IT systems. The role leads security operations, mentors junior staff, and collaborates on risk management and compliance efforts.

Responsibilities include monitoring security events, guiding incident response, and supporting audits to protect confidentiality, integrity, and availability of college data and networks.

Qualifications

• Bachelor’s degree in computer science, information technology, or related field.
• 5–10 years of information security administration, network administration and/or IT systems administration.
• Knowledge of information security concepts, frameworks, regulatory standards (e.g., NIST, CIS, PCI, FedRAMP).

Responsibilities

• Design and develop security systems and procedures.
• Assess and evaluate enterprise information security solutions.
• Lead response to information security issues and mentor junior analysts.
• Monitor daily security operations and manage incidents.
• Collaborate on audits and compliance with policies.

Skills

Information Security

Vulnerability Management

Incident Response

Regulatory Compliance

Security Monitoring

Risk Assessment

Threat Intelligence

Team Leadership

Education

Bachelor's Degree in Computer Science or related field

Tools

DLP

SIEM

Firewalls

Patch Management Tools

Job description

Senior Information Security Analyst (Re-Announcement)

*Salary is commensurate with education/experience which exceeds the minimum requirements.

Offers of employment are contingent upon a successful background check.

Internal Title Senior Information Security Analyst (Re-Announcement)

Position Type

Position Type Classified

Faculty / Non-Faculty / Administration

Faculty / Non-Faculty / Administration Non-Faculty

Pay Band

Pay Band TEC07

Level

Department

Department Security

Provides expertise for the design and development of security systems and procedures within a wide range of complexity levels. Primarily responsible for assessing and evaluating enterprise information security solutions. Guides Junior Security Analyst to identify and address risk, and lead the response to information security issues. Provides management and oversees the daily monitoring and mitigation of security threats and issues as they arise. Collaborates and participates in the auditing and assessment of college security policies and procedures to ensure compliance in order to minimize the risk to the confidentiality, integrity, and availability of college data, network, and information systems. Provides recommendations on security initiatives, controls, and best practices. Participates in the development and approval of the designs and selection of security solutions.

A Bachelor’s Degree in computer science, information technology, or related field. 5-10 years of experience in areas of information security administration, network administration and/or information technology systems administration. Candidates with an equivalent combination of experience and/or education are encouraged to apply.

Required Knowledge, Skills and Abilities

Knowledge of information technology, security concepts, and security frameworks. Experience in the installation, setup and operation of IT infrastructure (e.g., routers, switches, firewalls, intrusion detection/protection devices, and data encryption). Knowledge of operating systems (e.g., Android, iOS, Linux, Windows, VMWare), Cloud computing, networks, hardware and software platforms, and protocols related to information security. Experience performing vulnerability scanning, assessment, and analysis and leading infrastructure patch management. Experience managing and responding to information security risks, threats and incidents. Expert knowledge of applicable information security trends and best practices. Knowledge of applicable internal and/or external regulatory policies, standards, procedures and controls (e.g., NIST , CIS ). Knowledge of Payment Card Industry ( PCI ) controls, and the Federal Risk and Authorization Management Program (FedRAMP). Experience working with IT security vendors to implement and maintain security solutions. Preferred, but not required certifications include: Certified Information Systems Security Professional ( CISSP ), or Global Information Assurance Certification ( GIAC ).

Additional Comments Regarding Position

Must possess a valid driver’s license and a good driving record; must successfully pass a background check.

• Employee Tuition Assistance Program ( ETAP )

The College of Charleston is an equal opportunity employer and does not discriminate against any individual or group on the basis of sex, gender (including gender identity and/or expression), pregnancy, race, religion, color, national origin, age, disability, military or veteran status, sexual orientation, genetic information, and other classifications protected by applicable federal, state, and local laws. For more information, please visit eop.cofc.edu .

Security Analysis and Event Management – Actively monitor college Information Security operations and reporting systems for security issues / risk including network, endpoint devices, mobile devices, and servers. Monitor system consoles including but not limited to DLP , SIEM , anti-virus, endpoint advance threats, patch management, windows update services, software inventories and network traffic for potential security threats, risk and issues. Participate in the active remediation and/or oversight in the correction of identified issues, risk, deficiencies and incidents. Review daily security reports / dash boards for anomalies or security threats and remediate any issues identified. Promptly investigate high priority notifications and report findings to the CISO or appropriate designee. Document daily activities/incidents in the appropriate tracking systems where applicable.

Essential or Marginal

Percent of Time

Percent of Time 25

Activity

Vulnerability and Penetration Testing – Perform vulnerability scanning and penetration testing for applications, servers, network, endpoint devices and mobile devices. Develop and validate baseline security configurations and controls for critical network configurations. Coordinate vulnerability patch management process and prioritization. Provide guidance for remediation of system vulnerabilities and baseline security configurations.

Essential or Marginal

Percent of Time

Percent of Time 25

Activity

Security Subject Matter Expert – Along with the CISO , serve as an Information Security Subject Matter Expert on College RFP and Project Teams. Plan, assist and approve any Information Security Architecture design and procurement. Work with the CISO and other staff to develop and implement security procedures and practices following best security practices and the State Information Security Framework ( DIS -200). Coordinate and lead technical security activities. Actively participate in routine assessments of college offices and programs for compliance.

Essential or Marginal

Percent of Time

Percent of Time 15

Activity

Incident Response and Remediation – Work with the CISO to investigate suspected security breaches and/or policy violations and formulate recommendations for corrective action. Develop and maintain incident verification and remediation playbooks in partnership with IT technical teams. Work with the CISO , Office of General Counsel, IT and Office of Personnel Services to facilitate eDiscovery requests, litigation holds and priority personnel actions.

Essential or Marginal

Percent of Time

Percent of Time 20

Activity

Security Research and Evaluation – Stay abreast of current security threats and vulnerabilities. Maintain a working knowledge of established college policies and procedures. Maintain a working knowledge of established Federal and State Information Security regulations.

Essential or Marginal

Percent of Time

Percent of Time 5

Activity

Lead Junior Information Security Analyst. Provide mentorship and guidance to junior staff; provide relevant technical training and guidance to junior analysts and other departments. Leads junior analysts in core information security functions (for example, installation, configuration and maintenance of information security equipment). Collaborates with management to design and implement long-term information security strategies.

Essential or Marginal

Percent of Time

Percent of Time 10

Supplemental Questions

Required fields are indicated with an asterisk (*).

• * How did you hear about this employment opportunity?
  • Chronicle of Higher Education
  • CofC - Alumni Career Services
  • College of Charleston Website
  • Diverse: Issues in Higher Education
  • Glassdoor
  • Handshake
  • HigherEdJobs
  • Indeed.com
  • Internal Job Posting
  • jbcjobs (Joint Base Charleston Military & Family Readiness)
  • Job Fair
  • LinkedIn
  • Monster.com
  • Personal Referral
  • Post and Courier
  • Public Job Posting
  • SC Works (SC Department of Employment and Workforce)
  • Twitter
  • Word of mouth
  • Other
  • National Labor Exchange
  • CareerBuilder

Required Documents

Optional Documents

• Resume
• Cover Letter / Letter of Application
• Other Document
• Other Document 2
• Other Document 3
• Form DD 214