IT Security Analyst

Job Description

Summary Organization's Summary Statement: The Department of Information Technology invites resumes for a full-time, exempt position. The position will report to the Director of Information Technology. Responsibilities: ? Develops information technology security procedures and policies and ensure conformity to federal, state, and institutional audit standards. ? Takes the lead in the development of IT risk mitigation strategies. ? Performs periodic technical and non-technical evaluations of the university computing environment to identify compliance or security shortcomings. ? Maintains awareness of existing and emerging threats, assesses risks to the University, and mitigates identified risks. ? Performs software and service evaluations to identify and mitigate risks associated with 3rd party vendors and suppliers. ? Assists in the development and regular testing of business continuity and disaster recovery plans. ? Assist other technical support staff in identifying and implementing appropriate security safeguards including patch application and anti-malware strategies. ? Analyze network traffic, intrusion attempts, activity logs and system alerts for trends and professional manner with appropriate regard for privacy and confidentiality. ? Research and recommend policies and procedures to protect information assets from unauthorized or accidental modifications, destruction or disclosure ? Functions as a member of the data governance council ? Takes lead on maintaining security certificates and credential management ? Establishes and publishes required annual trainings for faculty and staff and ensures compliance to training directives. ? Performs other related duties as assigned. Physical Demands: May require extended periods of sitting at desk. May require lifting up to 25 lbs. Requires communication with a variety of constituents externally and internally. Requires operation of a variety of office Preferences: ? Bachelor's Degree. ? Two or more years of experience configuring and operating network and host-based firewalls, intrusion detection/prevention systems, vulnerability scanning tools, secure data transmission technologies (e.g. SSL, VPN, IPSEC, SSH) and network monitoring/protecting solutions. ? Prior experience as server, database or application administrator. ? Extensive networking experience, to include the programming of routers and switches, network planning, and failover. ? Prior experience using information security technologies such as: Intrusion detection and prevention, remote system management, vulnerability assessment and penetration testing, software and hardware-based firewalls, network access control and anti-malware and spam protection. ? Must be willing and available to work occasional weekend/evening assignments in both scheduled and unscheduled activities. Licenses/ Certifications: ? Multiple complementary information security certifications (e.g. CISSP, CISA, GIAC) preferred ? Cisco network certification (CCNP level preferred ? Microsoft System Certification (MCSE level preferred

Minimum Qualifications

Education: Bachelor's degree from an accredited college or university. Experience: Two (2) years of professional experience in network operations, system administrator or IT support. Other: Additional work experience as defined above may be substituted on a year for year basis for up to four (4) years of the required education. Knowledge of security best practices. Knowledge of core networking principles such as TCP/IP, DNS, DHCP. Knowledge of general system administration and desktop management principles. Skill in problem solving. Skill in oral and written communication. Skill in the use of Google products. Ability to interpret and apply policies, procedures, regulations, and laws. Ability to multitask while demonstrating a commitment to customer service and sensitivity to a culturally and ethnically diverse community. Ability to handle an on call rotation and possible work outside of normal business hours. Additional Job Details Required Application Materials: Cover letter, resume, and reference list. Best Consideration Date:01/12/2025 Posting Close Date: N/A Open Until Filled: Yes Department UMES-CITO-Information Technology Worker Sub-Type Staff Regular Salary Range $95,000 - $115,000 EEO Statement UMES is an EEO/AA employer and will not discriminate against any employee or applicant because of race, age, sex, color, sexual orientation, religion, national origin, marital status, genetic information, or political affiliation. Minorities, women, veterans, and persons with disabilities are encouraged to apply. The successful candidate must be able to show acceptable documentation establishing the right to accept employment in the United States of America without employer sponsorship. Diversity Statement The University of Maryland Eastern Shore (UMES) is an equal access, equal opportunity institution fully committed to diversity in education and employment. All students, employees, and the campus community at UMES are valued, respected, and have the opportunity to receive an equitable experience in an inclusive, welcoming environment of openness and appreciation. Title IX Statement It is the policy of the University of Maryland Eastern Shore (UMES) to comply with Title IX of the Education Amendments of 1972, which prohibits discrimination (including sexual harassment and sexual violence) based on sex in the University's educational programs and activities. Title IX also prohibits retaliation for asserting or otherwise participating in claims of sex discriminations or harassment. University of Maryland Eastern Shore Apply Job!