Senior Information Security Strategist (Hybrid)

UMass Amherst; Amherst (MA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

UMass Amherst is seeking a Senior Information Security Analyst to provide advanced technical and strategic leadership for the university's hybrid information security program, covering on-premises and cloud environments.

You will oversee vulnerability management, threat detection, incident response, and digital forensics; guide secure architecture for major projects; and conduct comprehensive risk assessments and audits.

Qualifications

• Bachelor's degree with seven (7) years' relevant experience or associate's degree with nine (9) years' relevant experience or high school diploma with 11 years' relevant experience.
• Expert understanding of multiple IT domains and their interdependence.
• Expert understanding of information security frameworks, privacy laws, and regulatory requirements (e.g., NIST, FERPA, HIPAA, PCI-DSS, ISO 27001).
• Demonstrated technical understanding of system and network security, incident response, and compliance requirements.
• Experience with security tools such as SIEM, EDR/XDR, forensics tools, firewalls, IDS/IPS, vulnerability management platforms, etc.
• Experience designing, assessing and implementing security controls in one or more cloud environments (Azure/AWS/GCP).

Responsibilities

• Provides advanced technical leadership for enterprise security operations; manages vulnerability lifecycle, incident response, and digital forensics across hybrid environments.
• Drives security operations architecture, automation, and optimization for resilient, scalable protection.
• Conducts advanced security audits and risk assessments across hybrid environments; designs safeguards and supports incident investigations.
• Leads secure architecture design for major projects, ensuring security controls and governance across lifecycle.
• Advises on optimal security approaches for cloud/native solutions; informs technology strategy with research on emerging capabilities.
• Manages complex security incidents across on premises and cloud, coordinating forensics, containment and remediation.
• Collaborates with stakeholders to manage information security risks and ensure regulatory compliance.
• Develops updates to policies, standards, procedures, and governance frameworks.

Job description

UMass Amherst is seeking a Senior Information Security Analyst to provide advanced technical and strategic leadership for the university's hybrid information security program, covering on-premises and cloud environments.

You will oversee vulnerability management, threat detection, incident response, and digital forensics; guide secure architecture for major projects; and conduct comprehensive risk assessments and audits.