Full Job Description
Primary Purpose:
This position will coordinate and perform risk assessments. Run various vulnerability assessment tools and conduct manual testing to identify vulnerabilities within applications. Prepare and present vulnerability reports and communicate remediation actions to system owners and developers. Lead forensic and internal investigations as required. Assist with IT Security related projects.
Job Category: Exempt
Hiring Range:
Pay Basis: Annually
Subject to Grant Funding? No
Essential Job Functions:
1. Assist in the evaluation of appropriate security controls to protect NSU information against accidental or unauthorized modification, destruction, or disclosure.
2. Interface with OIT staff, Information Security team members and other NSU college and school members during the design, development and management of Information System security solutions.
3. Assist with conducting risk assessment and provide recommendations for application security design and implementation.
4. Participate in a wide range of security issues including application architectures, firewalls, electronic data transmission, and network access.
5. Apply encryption technology, penetration and vulnerability analysis of various security technologies, in conjunction with information technology security research to projects.
6. Prepare security and incident response reports for management upon request.
7. Ensure compliance with university policies and procedures, county, state and federal regulations and accreditation requirements.
8. Assist with developing work plans based on organizational strategic plan.
10. Provide input into overall organizational Information Security plan.
11. Support organizational partnerships and programs in accordance with university mission statement.
12. Perform other duties as assigned.
Job Requirements:
Required Knowledge, Skills, & Abilities: 1. Excellent written and verbal communication skills.
2. Strong motivational and interpersonal skills.
3. Strong project management skills, including the ability to interact with a wide range of internal staff members and external professionals, including regulators, consultants, auditors, legal counsel, ethics, and others.
4. Ability to rapidly learn new technologies and business functions.
5. Outstanding negotiation skills are essential.
6. Good analytical skills and the ability to multi-task.
7. Able to work independently as well as with minimum supervision and in a team environment.
8. Detail oriented.
9. Solid understanding of information technology and information security practices, including the areas of host security, platform architecture, network perimeter security, intrusion detection/prevention, application security modeling, physical security, systems integrity, and disaster recovery.
Required Certifications/Licensures:
Required Education: Bachelor's Degree
Major (if required:
Required Experience: 1. Five (5) years experience in a technical support environment.
2. Strong background in project management.
Preferred Qualifications:
1. ISC2 CISSP.
2. CompTIA Security + or GIAC Security Essentials (GSEC).
Is this a safety sensitive position? No
Background Screening Required? Yes
Pre-Employment Conditions:
