Information Security Analyst

Gwynedd Mercy University • Gwynedd Valley, PA

12h

About The Position

Gwynedd Mercy University is looking for an Information Security Analyst to help protect the university’s systems, data, and people and continually improve our overall security posture. This is a broad, hands-on role within a collaborative IT team. The analyst will monitor and respond to security events, identify and remediate vulnerabilities, strengthen identity and access controls, help secure endpoints and infrastructure, review technology and vendors for security risk, and support the university’s security awareness and compliance efforts. We are looking for someone who takes ownership of problems rather than simply identifying them for someone else to solve. At the same time, this is a team environment. The right person knows when to act independently, when to collaborate, and when to escalate. This position also works directly with students, faculty, and staff when security issues affect them. We want someone who is patient, respectful, and helpful while remaining professional and security-conscious. Being helpful does not always mean giving someone the answer they want. We do not expect candidates to arrive knowing every system we use. Experience with our technology environment is a plus, but strong security fundamentals, intellectual curiosity, sound judgment, communication skills, and the ability to learn are more important. We are looking for someone who brings the curiosity, judgment, initiative, technical foundation, and collaborative mindset that are much harder to teach.

Requirements

• Professional experience in cybersecurity, systems administration, networking, infrastructure, or a related technical field.
• Strong understanding of cybersecurity fundamentals such as endpoint security, identity and access management, networking, logging and monitoring, vulnerability management, authentication, and incident response.
• Experience with EDR, SIEM/logging platforms, vulnerability scanners, firewalls, identity systems, or similar security technologies is expected.
• A bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field is welcome but is not required with equivalent relevant professional experience.

Nice To Haves

• Experience with our technology environment is a plus.
• Experience with our environment is preferred but not required.
• Experience with Microsoft security technologies, higher education, NIST/CIS frameworks, FERPA, GLBA, PCI-DSS, or relevant certifications such as Security+, CySA+, CISSP, or GIAC is helpful but not required.

Responsibilities

• Monitor security alerts, logs, endpoints, accounts, and other sources for suspicious activity; investigate events and take or coordinate appropriate action.
• Serve as a primary technical resource for cybersecurity incidents, including phishing, compromised accounts, malware, and other security events.
• Identify, prioritize, and help remediate vulnerabilities and security configuration weaknesses across endpoints, servers, networks, applications, and cloud services.
• Help secure identity and access systems, including MFA, privileged access, administrative and service accounts, authentication, permissions, and account lifecycle processes.
• Work with Infrastructure, Technical Services, and other IT staff to improve endpoint, network, server, cloud, and data security.
• Review software, cloud services, vendors, applications, and integrations for cybersecurity and data-protection risk and recommend practical ways to mitigate identified concerns.
• Support security frameworks, regulatory requirements, audits, cyber insurance activities, documentation, security awareness, and incident-response planning.
• Develop and track meaningful security metrics and help identify trends, recurring weaknesses, and opportunities for improvement.
• Work directly with students, faculty, and staff affected by security incidents, helping them restore secure access while ensuring appropriate security measures are completed.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree