Learning and Technology Services: Information Security Officer

University of Wisconsin Stout•Harvey, WI

6d•Onsite

About The Position

A full-time, professional academic staff position is available in Learning & Technology Services beginning November 9, 2026. The working title for this position is Information Security Officer with an official title of Information Security Analyst IV. This is a renewable assignment, contingent on performance. The salary will be in the range of $75,000 to $85,000 annually based on qualifications and experience. The Information Security Officer (ISO) is responsible for overseeing the overall information security program and cybersecurity for the campus. This individual will be an integral part of the Learning & Technology Services (LTS) organization reporting directly to the Chief Information Officer (CIO) with the primary focus and goal of helping to improve the overall cyber security posture of the campus along with the implementation and continuous improvement of a detailed information security program. The information security program will involve everything information security and cybersecurity related for the campus. Being able to clearly articulate in written and verbal communication the goals, scope, vision, mission, roles, workflows, and tools associated with the information security program is the key responsibility of the ISO. Collaborating closely with leaders from across the UW-Eau Claire campus and the Universities of Wisconsin system is also an important task for this individual. In addition, reviewing, documenting, and working with other LTS experts to meet the goals and procedures associated with the Universities of Wisconsin information security policies and overall cybersecurity best practices are also required. This position reports directly to the Chief Information Officer (CIO) and works closely with the CIO and other IT Directors of LTS. The ISO is expected to be available on campus during business hours and reachable during off business hours in case of a cyber related incident.

Requirements

A bachelor’s degree from an accredited institution.
Excellent written and verbal communication skills.
Knowledge and experience of information security best practices, policies, tools, and services used in securing an enterprise-wide technology infrastructure and environment.
Possess strong ability to troubleshoot, analyze, and develop solutions for cyber security related events and concerns.
Possess strong ability to quickly learn new tools as technology changes.
Ability to independently work through and understand advanced information technology concepts.
Ability to establish priorities and work under time constraints.
Ability to work as a part of a team collaborating with colleagues on solutions to technical issues.
Authorized to work in the United States.

Nice To Haves

A master’s degree in computer science, information systems, business, or related field.
Certifications and accreditations in the field of information security or cybercity.
Experience supervising students or other employees.
Experience in preparing and managing a fiscal budget associated with an information security program.
System administration experience with Windows, Linux, Unix, or Mac operating systems.
Experience with virtualization, networking, software installation and/or software distribution in a large environment.
Possess an in-depth understanding of the computer field with a focus on Microsoft Server operating systems.
Understand the complexities involved in the design, implementation, and administration of domains.

Responsibilities

Directs the development security awareness programming
Contributes to the development of policy and protocol related to security change requests and privilege access
Determines necessary technical changes to improve security
Leads forensic analysis and reporting for major and high-risk security breaches
Leads monitoring of daily system operations using intrusion detection and prevention systems and assesses findings
Leads project teams in the configuration, development, and testing of applications and security controls
Designs, develops, and implements developing security methodology and infrastructure for major systems
Continuously develop, improve, and implement an information security program for the campus that will include but will not necessarily be limited to the following: Goals, Scope, Vision, Mission, Roles, Workflows, Tools
Provide expertise and system administration for all information security program tools.
Train, manage, supervise and mentor student information security analysts.
Develop, implement, and manage the Incident Response Team (IRT), Disaster Recovery (DR) processes, tabletop exercises, and annual network penetration test process.
Coordinate with LTS experts and other units to ensure disaster recovery strategies and COOP plan are documented, integrated, updated, and align with campus needs and priorities.
Assess and track campus compliance to Universities of Wisconsin information security policies and audits.
Develop plans to address compliance issues with Universities of Wisconsin information security policies, audits, and other cyber security requirements.
Prepare, educate, and train campus for a cyber related incident.
Develop annual budget for the overall information security program.
Work closely with LTS experts to identify cybersecurity risks.
Develop and implement solutions to mitigate cybersecurity risks.
Lead the process of establishing campus cybersecurity standards and best practices.
Research hardware, software, and cybersecurity related issues.
Provide risk assessment information associated with the procurement of software.
Work congruently with Universities of Wisconsin information security policies.
Participate in LTS all staff meetings and other related meetings as requested.
Collaborate with other information security experts from across Universities of Wisconsin.
Communicate effectively with UW-Eau Claire faculty, staff, and students.
Represent UW-Eau Claire at Universities of Wisconsin TISC meetings.
Attend and participate in security related seminars, workshops, trainings, and conferences.
Research and apply for grant funding associated with information security initiatives and priority needs.
Perform miscellaneous duties as assigned by CIO.