Information Security Analyst

Position Information

The Information Security Analyst is responsible for the implementation of the Information Security Office governance, risk management, compliance, and awareness program. The position will conduct risk assessments; coordinate audit engagements with relevant parties; maintain policies, standards and procedures designed to safeguard information and resources; manage information security awareness training. In addition, conduct vulnerability assessments and security reviews through vulnerability scans and penetration tests to determine deviations from acceptable configurations, policies, and standards. Finally, the incumbent will assess levels of risk and recommend appropriate mitigation controls. This position is classified as predominantly remote with occasional visits to campus as needed. Working hours will be based on Pacific Standard Time (PST). The full salary range for the Information Security Analyst is $88,301.52 - $162,425.52 annually. However, the pay scale for this position is up to $121,785.30 annually. We base salary offers on a variety of considerations, such as education, licensure and certifications, experience, and other business and organizational needs. Applicants must have current work authorization when accepting a UCR staff position. Currently, UCR is unable to sponsor or take over sponsorship of an employment Visa for staff. As a University employee, you will be required to comply with all applicable University policies and/or collective bargaining agreements, as may be amended from time to time. Federal, state, or local government directives may impose additional requirements.

Requirements

Educational Requirements

Degree

Bachelor's degree in related area and/or equivalent experience/training.

Requirement

Required

Experience Requirements

Experience

Minimum of 4 - 7 years of related experience in information security, IT risk management, compliance, or a related field.

Requirement

Experience

Experience managing, configuring, or auditing security controls across multiple operating systems (e.g., Windows, Linux, UNIX).

Requirement

Experience

Experience conducting IT risk assessments or Third-Party Risk Assessments using industry-standard frameworks.

Requirement

Experience

Experience with security and privacy related regulations such as FERPA, HIPAA, PCI, etc.

Requirement

Preferred

Experience

Experience designing, executing, or supporting cybersecurity awareness training or campus-wide outreach programs (such as phishing simulations).

Requirement

Experience

Experience working in higher education.

Requirement

Minimum Requirements

• Basic skill at reading and interpreting security logs.
• Ability to follow department processes and procedures.
• Interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization.
• Experience using IT security systems and tools. Knowledge of data encryption techniques. Experience analyzing logs for security breaches.
• Demonstrated skills applying security controls to computer software and hardware.
• Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.
• Knowledge of computer hardware, software and network security issues and approaches.
• Demonstrated experience selecting and applying appropriate data encryption technologies.

Preferred Qualifications

• Knowledge of other areas of IT, department processes and procedures.
• Experience in incident response and digital forensics including data collection, examination and analysis.
• Familiarity with leveraging Artificial Intelligence (AI) tools to automate or streamline administrative tasks, report writing, or content generation.

Additional Information

In the Heart of Inland Southern California, UC Riverside is located on nearly 1,200 acres near Box Springs Mountain in Southern California; the park-like campus provides convenient access to the vibrant and growing Inland region. The campus is a living laboratory for the exploration of issues critical to growing communities' air, water, energy, transportation, politics, the arts, history, and culture. UCR gives every student, faculty and staff member the resources to explore, engage, imagine and excel.

UC Riverside is recognized as one of the most ethnically diverse research universities in the country boasting several key rankings of which we are extremely proud.

• UC Riverside is proud to be ranked No. 12 among all U.S. universities, according to Money Magazine's 2020 rankings, and among the top 1 percent of universities worldwide, according to the 2019-20 Center for World University rankings.
• UC Riverside is the top university in the United States for social mobility. - U.S. News 2020
• UCR is a member of the University Innovation Alliance, the leading national coalition of public research universities committed to improving student success for low-income, first-generation, and students of color.
• Among top-tier universities, UC Riverside ranks No. 2 in financial aid. - Business Insider 2019
• Ranked No. 2 in the world for research, UCR's Department of Entomology maintains one of the largest collections of insect specimens the nation. - Center for World University Rankings
• UCR's distinguished faculty boasts 2 Nobel Laureates, and 13 members of the National Academies of Science and Medicine.

The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected categories under state or federal law. It is the policy of the University of California to undertake affirmative action and anti-discrimination efforts, consistent with its obligations as a Federal and State contractor.

For information about our generous employee benefits package, visit: Employee Benefits Overview

Job Description Details

Generic Scope

Experienced professional who knows how to apply theory and put it into practice with in-depth understanding of the professional field; independently performs the full range of responsibilities within the function; possesses broad job knowledge; analyzes problems/issues of diverse scope and determines solutions.

Custom Scope

Applies skills as a seasoned, experienced IT security professional with a full understanding of industry practices, governmental regulations and campus, medical center or Office of the President policies and procedures to resolve a wide range of complex issues. Demonstrates competency in recommending methods and techniques to obtain results.

Department Custom Scope

The Information Security Analyst is responsible for the implementation of the Information Security Office governance, risk management, compliance, and awareness program. The position will conduct risk assessments; coordinate audit engagements with relevant parties; maintain policies, standards and procedures designed to safeguard information and resources; manage information security awareness training. In addition, conduct vulnerability assessments and security reviews through vulnerability scans and penetration tests to determine deviations from acceptable configurations, policies, and standards. Finally, the incumbent will assess levels of risk and recommend appropriate mitigation controls.