Information Security Analyst - IRO

The University of Arizona•Tucson, AZ

5d•Hybrid

About The Position

University Information Technology Services (UITS) is the University of Arizona’s central technology organization. UITS delivers enterprise and specialized technology services that support students, faculty, researchers, staff, and campus partners. Through innovation, strategic partnerships, and a commitment to accessibility and continuous improvement, UITS supports the evolving needs of a leading research university and the communities it serves. UITS invites applicants for the Information Security Analyst - IRO (Information Security Analyst III) position. The Information Security Analyst will provide expertise in the Information Resource Owner role for risk management of software contracts managed by the UITS organization. This role reviews software contracts to ensure data security obligations are met before contracts are finalized and works alongside the Information Security Office (ISO) to align data governance and university policy across the software contract lifecycle. This position is based at the Tucson campus and may be eligible for a hybrid work arrangement, subject to supervisor approval and department needs. Visa sponsorship is not available for this position.

Requirements

Bachelor's degree or equivalent advanced learning attained through professional level experience required.
Minimum of five (5) years of relevant work experience, or equivalent combination of education and work experience.

Nice To Haves

Experience working in higher education.
Experience in information security analysis.
Experience in technical writing.
Experience with information security risk policies.
Experience evaluating software contracts for data risks.
Experience with stakeholder management.

Responsibilities

Review UITS-managed software contracts for data security policy alignment.
Provide recommendations for software owners across all departments within the University to mitigate security risks.
Construct, design, or perform daily reviews and monitor reports and notifications relating to security attacks that the University is currently under.
Advise and collaborate with institutional stakeholders and campus partners to align strategic initiatives to improve security controls and software.
Work with campus partners to improve and coordinate the University's preventative measures and response processes.
Communicate and collaborate with the Information Security Office (ISO) to ensure data security policy updates.