Cybersecurity Analyst

University of Wisconsin Madison•Madison, WI

7d•Hybrid

About The Position

The Cybersecurity Analyst serves as a strategic collaborator, uniquely bridging the gap between proactive risk management and real-time emergency response. Unlike traditional siloed roles, this position is responsible for the integrated threat lifecycle: you will lead cybersecurity risk assessments to enforce secure environments, while simultaneously serving as the primary lead for incident response when threats emerge. This role is fundamental to protecting the integrity of our HIPAA-regulated patient data and ensuring that the School’s $1B+ research enterprise remains resilient against an increasingly sophisticated global threat landscape. This position may require some work to be performed in-person, onsite, at a designated campus work location. Some work may be performed remotely, at an offsite, non-campus work location.

Requirements

Demonstrated experience conducting cybersecurity risk assessments to identify and document risks across business processes, cloud/IT systems, and research workflows.
Hands-on experience using security operations tools (e.g., SIEM, EDR/XDR, vulnerability scanners) to monitor enterprise environments, triage alerts, and track remediation.
Working knowledge of cybersecurity frameworks and regulations, including HIPAA/HITECH, NIST SP 800-53 / 800-171, ISO 27001, or CIS Controls.
Proven ability to document information security processes, procedures, and validation of remediation
Strong written and verbal communication skills, with the ability to translate complex security risks to non-technical business partners, clinical leads, and researchers.

Nice To Haves

2 or more years of experience with cybersecurity
Detailed understanding of network design, security controls, and system administration with excellent analytical and problem-solving skills
Proven experience in cybersecurity governance, risk management, and compliance
Experience executing project management skills including design review, threat modeling, and risk profiling while working across a large, complex, distributed, organization
Experience writing or updating technical documentation, security procedures, and compliance reporting artifacts.
Active industry certification: CompTIA CySA+, Security+, GIAC (GSEC/GCIH), CISA, or equivalent certification.

Responsibilities

Assists in the identification, development, and facilitation of unit staff training opportunities
Performs cybersecurity risk assessments to pre-emptively harden research and clinical infrastructure, while simultaneously spearheading incident response to ensure collaboration across SMPH, campus, and third-party vendors
Performs basic data analyses and reporting
Assists in mapping business processes using basic mapping methodologies
Assists in making recommendations for the selection of technology solutions to align with business strategies
Assists in the design, development, and implementation of data reporting and business intelligence systems
Provides basic procedural and technical guidance to unit staff regarding technology usage and management