Senior Unit Information Security Specialist

University of California - Los Angeles (UCLA); Los Angeles (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

The UCLA Office of Information Security seeks a Senior Unit Information Security Specialist to collaborate with campus groups and the ACISO to analyze security needs, define programs, and provide guidance on technologies and services that protect institutional data.

You will ensure effective communication of policies within assigned organizations and coordinate with the Digital & Technology Solutions team to align security services with campus standards and programs, advancing UCLA's security

Qualifications

• Five years of experience in cybersecurity, IT, computer science, or related fields.
• Experience in project-based environments with schedule management, status reporting and risk/issue communication.
• Experience promoting inclusion, equity, diversity and belonging.
• Strong understanding of information security fundamentals.
• Advanced knowledge of privacy and security regulations in higher education.
• Advanced knowledge of threat, vulnerability, and information value in risk management.
• Ability to coordinate with other information security teams to address security incidents.
• Understanding of user lifecycle access and identity/access management controls.
• Strong written and verbal communication with diverse stakeholders.
• Ability to establish positive working relationships with colleagues and stakeholders.
• Advanced organizational skills and ability to balance competing priorities.
• Strong problem-solving and root-cause analysis.
• Capable of making decisions with integrity and thinking creatively.

Responsibilities

• Collaborate with organizations and the ACISO to analyze security needs and define programs.
• Provide guidance and support for implementing security technologies and services.
• Communicate policies and procedures clearly within assigned organizations.
• Coordinate with the DTS organization to align services with security programs.
• Protect institutional data and support UCLA's mission.
• Deliver security services comprehensively and consistently.
• Advance UCLA's information security culture and operations.

Skills

Cybersecurity

IT Experience

Project management

DEI focus

Security fundamentals

Privacy regulations

Risk management

Identity and access

Communication

Stakeholder relations

Organization

Problem solving

Decision making

Education

Bachelor's Degree

Security Certifications

Job description

Department Summary

The UCLA Office of Information Security enables UCLA's goals by providing leadership assuring the confidentiality, integrity, and availability of its information resources. The Information Security Office enables efficient incident response planning and notification procedures. In addition, the office aims to implement risk assessment strategies to identify vulnerabilities and threats to departmental information resources and enterprise systems. This includes executing a comprehensive UCLA IT security plan, which involves proposing, delivering, and enforcing administrative, technical, and physical security measures to tackle identified risks based on their sensitivity or criticality.

Position Summary

The UCLA Office of Information Security enables UCLA's goals by providing leadership assuring the confidentiality, integrity, and availability of its information resources. The Information Security Office enables efficient incident response planning and notification procedures. In addition, the office aims to implement risk assessment strategies to identify vulnerabilities and threats to departmental information resources and enterprise systems. This includes executing a comprehensive UCLA IT security plan, which involves proposing, delivering, and enforcing administrative, technical, and physical security measures to tackle identified risks based on their sensitivity or criticality.

The UCLA Office of Information Security has established a program to collaborate with the campus community and organizations to implement information security best-practices, technologies, and initiatives that modernize and elevate our information security programs that protect our institution. The Senior Unit Information Security Specialist will collaborate with assigned organizations and the Assistant Chief Information Security Officer (ACISO) to analyze organizational information security needs, define programs, processes and practices that conform with campus security standards, and to provide guidance and support with the implementation of technologies and services that will protect institutional data. Additionally, the Senior Unit Information Security Specialist will ensure effective communication with assigned organizations regarding policies, initiatives and procedures are thoughtfully implemented within assigned organizations. The Senior Unit Information Security Specialist will coordinate with assigned customer groups and within the Digital & Technology Solutions (DTS) organization to deliver services and capabilities that align with security programs and policies. The Senior UISS will positively impact UCLA's operations and culture by protecting University stakeholders' information and data in service of the institution's academic mission. This team member will advance the University's mission by delivering exceptional security services comprehensively and consistently for faculty, staff, and students. This role will execute UCLA's vision while modeling UCLA's culture and values.

Salary & Compensation

UCLA provides a full pay range. Actual salary offers consider factors, including budget, prior experience, skills, knowledge, abilities, education, licensure and certifications, and other business considerations. Salary offers at the top of the range are not common. Visit UC Benefit package to discover benefits that start on day one, and UC Total Compensation Estimator to calculate the total compensation value with benefits.

Qualifications

• Five years experience working in one or more of the following fields: cybersecurity, information technology, computer science, computer information systems, etc. (Required)
• Proven experience using IT systems and tools. (Required)
• Experience working in a project-based environment using leading project management practices including schedule management, status reporting, and communication of project risks and issues. (Required)
• Experience participating in activities to advance an inclusive environment that values equity, diversity, inclusion and belonging. (Required)
• Seven or more years experience working in one or more of the following fields: cybersecurity, information technology, computer science, computer information systems, etc. (Preferred)
• Strong understanding and working knowledge of Information Security fundamentals. (Required)
• Advanced knowledge of privacy and security regulations and best practices, including federal and state laws, policies, and standards relevant to higher education. Knowledge of data classification and ability to educate on data classification requirements. (Required)
• Advanced knowledge of the relationship between threat, vulnerability, and information value in the context of Information Security risk management. (Required)
• Ability to coordinate closely with other Information Security teams to effectively address security breaches or incidents. (Required)
• Understanding of user lifecycle access activities, as well as identity and access management controls. (Required)
• Strong written and verbal communication skills and is able to communicate complex technical ideas to a diverse community of colleagues and stakeholders. Can relay technical information to audiences of technical and non-technical stakeholders. (Required)
• Able to establish and advance positive working relationships and a strong rapport with a diverse community of colleagues including team members, stakeholders, and customers. (Required)
• Advanced organizational skills and is able to balance competing priorities and deliver concurrent projects to various stakeholder types. (Required)
• Advanced problem-solving skills; ability to uncover root of difficult problems and scope solutions based on knowledge of available resources and timelines as well as awareness of vision and strategy. Seeks information from multiple and diverse sources to inform solutions. (Required)
• Demonstrated ability to make decisions with integrity. (Required)
• Thinks creatively and introduces innovations such as the incorporation of new technologies or processes. Thrives in an ever-changing, fast-paced environment. (Required)

Education, Licenses, Certifications & Personal Affiliations

• Bachelor's Degree in one or more of the following fields: information technology, computer science, business administration, communications or equivalent combination of experience and training. (Required)
• One or more of the following: CISSP, CISA, Security+, CEH, CISM, or equivalent certification (Preferred)

Special Conditions for Employment

• Background Check: Continued employment is contingent upon the completion of a satisfactory background investigation.
• Live Scan Background Check: A Live Scan background check must be completed prior to the start of employment.

Schedule

8:00 a.m. to 5:00 p.m.

Union/Policy Covered

99-Policy Covered