Edtech.com's Summary

University of Central Florida is hiring an Information Security Professional II to strengthen the university's cybersecurity and compliance program from within its cyber governance, risk, and compliance group. The professional assesses risk, reviews the security practices of outside vendors, and checks that departments and systems meet security policies and regulatory requirements. Working with colleges, business units, and technology partners, the role finds vulnerabilities and follows them through to remediation.

Highlights

Administer the university's Vendor Risk Management program, conducting security reviews and assessments of third-party vendors.
Monitor compliance with university information security policies, standards, regulatory requirements, contractual obligations, and applicable laws.
Perform risk assessments, compliance reviews, and vulnerability analyses of existing and proposed technology solutions, using both automated and manual techniques.
Track remediation work across technical and business teams and verify that required security patches and configuration changes were actually implemented.
Partner with colleges, departments, and business units to evaluate security and compliance risks and recommend corrective actions.
Develop and maintain information security policies, standards, and guidelines while promoting security awareness across the university.
Requires a bachelor's degree and two years of relevant experience, or a high school diploma and six years of relevant work experience in place of the degree.
Preferred candidates have vendor risk management or security assessment experience, familiarity with NIST, CIS Controls, ISO 27001, FERPA, HIPAA, or PCI-DSS, and certifications such as Security+, CISSP, CISM, or CISA.
Must hold a valid Class E driver's license, since the job may involve driving to locations on and off campus to conduct university business.
The posted salary range is $64,518 to $80,000 per year.

Information Security Professional II Full Description

University Operations:

The University Operations division at UCF is committed to creating a supportive and welcoming environment for our faculty, staff, students, and the broader community. We take pride in delivering exceptional service, sharing our expertise, and upholding the highest standards to ensure a world-class campus experience.

The Opportunity:

University Operations is seeking to hire an Information Security Professional II. This role will support and strengthen the institution's cybersecurity and compliance program. This position plays a critical role in safeguarding university information assets by assessing risk, monitoring compliance, managing vendor risk reviews, conducting security assessments, and promoting information security best practices across the organization. The successful candidate will collaborate with departments, business units, and technology partners to identify vulnerabilities, mitigate risks, and enhance the University's overall security posture.

Responsibilities:

Monitor compliance with university information security policies, standards, regulatory requirements, contractual obligations, and applicable laws.
Develop, maintain, and promote information security policies, standards, guidelines, and best practices.
Manage and administer the University's Vendor Risk Management (VRM) program, including conducting vendor security reviews and assessments.
Partner with colleges, departments, and business units to evaluate security and compliance risks and recommend corrective actions.
Perform risk assessments, compliance reviews, vulnerability analyses, and security evaluations of existing and proposed technology solutions.
Analyze security findings and communicate recommendations to stakeholders to improve security posture and reduce risk.
Track remediation activities and verify implementation of required security patches, configurations, and corrective actions.
Monitor vulnerability scans, security assessments, system configurations, and relevant security information to identify potential risks.
Coordinate and track mitigation and remediation efforts across technical and business teams.
Utilize automated and manual assessment techniques to identify, validate, and evaluate security vulnerabilities.
Research emerging cybersecurity threats, tools, and industry best practices to strengthen the University's security program.
Conduct compliance activities and security reviews to ensure adherence to established security objectives and standards.
Promote a culture of security awareness while maintaining productive partnerships and delivering exceptional customer service.

Minimum Qualifications:

Bachelor’s degree and 2 years of relevant experience; or High School Diploma (or equivalent) and 6 years of relevant work experience in lieu of degree; or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).

Preferred Qualifications:

Experience managing or participating in Vendor Risk Management (VRM) programs.
Experience conducting security assessments, vulnerability reviews, and compliance audits.
Knowledge of security frameworks and standards such as NIST, CIS Controls, ISO 27001, FERPA, HIPAA, or PCI-DSS.
Experience working within higher education, government, or large complex organizations.
Professional certifications such as Security+, CISSP, CISM, CISA, CRISC, or related credentials.
Experience with vulnerability management and security monitoring tools.

Special Instructions to the Applicants:

Position requires a valid Class E driver’s license. This position may involve driving to various locations on and off campus to conduct University business.

The anticipated salary range for this position is $64,518 - $80,000. The final salary will be determined based on the candidate's qualifications, experience, and internal equity considerations.

All applicants must be authorized to work for any U.S. employer. Visa sponsorship is not available for this position, and the university cannot accommodate H‑1B transfers or employment-based visa processing for individuals currently sponsored by another employer.

This role requires the successful candidate to work on-site at UCF as their primary work location. On-site presence is an essential function of this role.

Department:

UCF IT Information Security Office

Work Schedule:

Monday - Friday 8:00 AM - 5:00 PM

Type of Appointment:

Regular

Unless explicitly stated on the job posting, it is UCF’s expectation that an employee of UCF will reside in Florida as of the date the employment begins.

The University of Central Florida is an equal opportunity employer that does not discriminate against any employee or applicant for employment based on any characteristic protected by law. The University maintains programs for protected veterans and individuals with disabilities in accordance with all applicable federal and state laws.

As a Florida public university, the University of Central Florida makes all application materials and selection procedures available to the public upon request.

Let me find your next job.

Thanks - you're signed up.

Information Security Professional II

Edtech.com's Summary

Information Security Professional II Full Description

Privacy Engineer II

Security Technology Analyst

Network Security Engineer Lead

Information Security Professional IV, Lead

Field Office Info Systems Security Manager