Edtech.com's Summary

Harvard University is hiring an Information Security Analyst. The role helps build and run vulnerability management, cloud security, and data loss prevention (DLP) programs for Harvard Medical School's IT infrastructure, spanning traditional on-premises systems and modern cloud services. The analyst works with system administrators and teams across Harvard Medical School IT and Harvard University IT to report on security findings and track them through to closure.

Highlights

Run recurring vulnerability and compliance reporting, quality-check the results, and deliver the reports to Harvard Medical School groups on schedule.
Advise system administrators on security findings and remediation, and track each issue through to verified closure.
Drive the day-to-day endpoint security compliance effort, making sure required security agents are deployed and healthy across devices.
Monitor cloud security posture, triage misconfigurations, and work with cloud owners to fix the findings.
Triage data loss prevention alerts and coordinate the cleanup of sensitive data stored on shared drives.
Support vendor risk management through security reviews and follow-up on issues they uncover, along with security assessments, penetration testing, and the security awareness program.
Build dashboards and reports and use basic scripting to automate recurring security tasks.
Five years of post-secondary education or relevant work experience, plus a bachelor's degree in information systems, cybersecurity, or a related field and working knowledge of vulnerability management concepts such as CVE and CVSS.
Preferred experience includes enterprise vulnerability scanning and endpoint protection tools, cloud security posture management, and familiarity with HIPAA, NIST SP 800-53, and the NIST Cybersecurity Framework, with security certifications such as Security+, PenTest+, or CCSK listed.
Fully remote, 35 hours per week, working from a Harvard registered state with occasional on-site visits at the department's discretion.

Information Security Analyst Full Description

Harvard Medical School nurtures a diverse group of leaders and future leaders in both clinical care and biomedical inquiry who are on the front lines of medicine and science serving individuals and populations locally, nationally, and globally. The Information Technology Department at Harvard Medical School enables this mission by delivering secure and scalable services. Digital Identity is a key underpinning of the digital transformation strategy driving trust and seamless experiences for our incredibly talented community.

The Security team in the Harvard Medical School Department of Information Technology is seeking an Information Security Analyst to help build and sustain Vulnerability, Cloud and DLP Management solutions and to provide critical operational support for HMS infrastructure. This position offers a breadth of opportunity, ranging from traditional on-prem systems and solutions to contemporary cloud solutions. The Information Security Analyst will work collaboratively with all departments within HMS IT and Harvard University IT.

PRINCIPAL DUTIES AND RESPONSIBILITIES:

Operate recurring vulnerability and compliance reporting, quality-check results, and distribute reports to HMS groups on schedule.
Advise system administrators on findings and remediation, and track issues through to verified closure.
Run day-to-day execution of the endpoint security compliance effort, ensuring required security agents are deployed and healthy.
Monitor cloud security posture, triage misconfigurations, and work with cloud owners to remediate findings.
Support vendor risk management, including security reviews and follow-up on identified issues.
Triage data loss prevention alerts and coordinate remediation of sensitive data on shared storage.
Support security assessments, penetration testing, and the security awareness program.
Build dashboards and reports, and use basic scripting to automate recurring tasks.

Qualifications

Basic Qualifications:

Minimum of five years’ experience post-secondary education or relevant work experience.

Additional Qualifications and Skills:

Bachelor's degree in information systems, cybersecurity, or a related field.
Working knowledge of vulnerability management fundamentals, including CVE and CVSS, risk prioritization, and remediation timelines.
Demonstrated ability to obtain results from technical staff who do not report to you, with strong written and verbal communication skills.
Hands-on experience with enterprise vulnerability scanning, endpoint protection, or asset inventory tools.
Experience with cloud security posture management and common cloud misconfigurations.
Experience with vendor or third-party security risk assessments.
Experience with data loss prevention alert triage and sensitive data remediation.
Experience with endpoint management and agent deployment at scale.
Experience with IT service management or GRC ticketing and reporting.
Familiarity with HIPAA, NIST SP 800-53, the NIST Cybersecurity Framework, or comparable frameworks.
Experience in higher education, an academic medical center, or a research environment, especially with decentralized IT groups.
Strong problem-solving skills, attention to detail, and the ability to act as a trusted advisor.

Certificates and Licenses:

SecAI+
Security+
PenTest+
CCSK
Cloud+

Additional Information

Standard Hours/Schedule: 35 hours per week.

Visa Sponsorship Information: Harvard University is unable to provide visa sponsorship for this position.

Pre-Employment Screening: Identity, Criminal.

Interview Format: All interviews will be conducted remotely using a video conferencing platform.

Staying Informed About Your Application: Due to the high volume of applications, we may not always be able to reach out right away, but you can track your status anytime through the Careers@Harvard portal.

Work Format Details

This position has been determined by school or unit leaders that the duties and responsibilities can effectively be performed fully remotely at a non-Harvard location. Employees in fully remote positions must work all scheduled hours in a Harvard registered state in compliance with the University’s Policy on Employment Outside of Massachusetts. At the discretion of the department, fully remote employees may occasionally be required on site at a Harvard location. Certain visa types and funding sources may limit work location. Individuals must meet work location sponsorship requirements prior to employment.

Salary Grade and Ranges

This position is salary grade level 058.

Let me find your next job.

Thanks - you're signed up.

Information Security Analyst

Edtech.com's Summary

Information Security Analyst Full Description

Information System Security Manager - ISSM

Director, Information Security

Analyst, Cybersecurity Governance, Risk and Compliance

Cybersecurity Engineer (GTRI-Info & Cybersecurity Dept)

Senior Cybersecurity Program Manager