Job Description

Summary

We are seeking a Data Security Analyst to join Computing and Multimedia Technologies (CMT) at the Survey Research Center (SRC) of the Institute for Social Research (ISR). CMT provides an opportunity to work in a collaborative team with the mission of providing excellent customer service in support of social science research and data collection.

The Data Security Analyst monitors, evaluates, and maintains systems and procedures to protect the SRC and ISR information systems, networks, and data. They will report to the Director of CMT and work under the functional guidance of senior data security staff.

Responsibilities*

Research and document NIST, CJIS, and other information security standards as part of project compliance and certification processes. Review audit results and implement changes to procedures and technical systems to ensure requirements are successfully met.
Act as a liaison to technical staff to implement information security plans, processes, and procedures. Collaborate with stakeholders to identify security issues and possible solutions. Communicates status updates with technical staff, project staff, and faculty regarding security projects, tasks, and process changes.
Assist system administrators with required system patching, vulnerability scanning and other relevant security procedures. Monitors, evaluates, and audits systems and procedures to ensure that information systems are in compliance with the applicable security standards.
Identify, evaluate, and implement information security tools and processes which support compliance with required information assurance standards and improve organizational data security.
Provide guidance and training to project staff and operations technical staff to ensure that users are prepared for and understand security procedures and standards.
Perform security incident handing procedures in the identification, containment, and remediation of incidents. Consults with CMT staff to recommend corrective actions to mitigate future data security breaches.
Required Qualifications*

Bachelor’s degree in Computer Science, Information Technology, or an equivalent combination of education, certifications and experience is required.
Three years of experience securing electronic information technology, network environments, and computer systems in a Microsoft Windows environment.
Excellent communication and technical documentation skills
Ability to work both independently and in close collaboration within a team
Demonstrated knowledge of information security concepts, procedures and practices.
Demonstrated knowledge of networking protocols and an understanding of security related technologies including encryption, VPN, Firewalls, etc.
Desired Qualifications*

Knowledge of security incident handling practices and experience assisting technical staff with incident handling.
Experience with desktop computer support or server administration.
Experience with Microsoft Active Directory and Group Policy.
Experience with system security in a commercial cloud environment
Security-focused certifications from SANS, CompTIA, or similar.
Work Locations

This position requires regularly scheduled on-site work to provide incident response and remediation.