Information Security Professional I

University of Central Florida•Orlando, FL

3d•Onsite

About The Position

The Information Security Professional I supports the Information Security Office (ISO) Risk and Compliance team by helping safeguard the university’s information assets. This role monitors compliance with institutional IT security policies, standards, and applicable laws; supports security awareness and engagement initiatives; and contributes to governance, risk, and compliance (GRC) activities. The position works collaboratively with colleges, departments, and vendors to strengthen the university’s overall security posture.

Requirements

Bachelor’s degree; or High School Diploma (or equivalent) and 4 years of relevant work experience in lieu of degree or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
Position requires a valid Class E driver’s license.
The position may involve driving to various locations on and off campus to conduct University business.
All applicants must be authorized to work for any U.S. employer.
Visa sponsorship is not available for this position, and the university cannot accommodate H‑1B transfers or employment-based visa processing for individuals currently sponsored by another employer.

Nice To Haves

Experience supporting information security, risk, compliance, or governance programs.
Experience with security awareness and training programs, including phishing simulations, campaign coordination, or content development.
Familiarity with risk assessment and risk register management, including documenting risks, tracking mitigation efforts, and supporting risk owners.
Experience developing metrics, dashboards, or reports to demonstrate security posture, program maturity, or training effectiveness.

Responsibilities

Assist with the development and delivery of the university’s security awareness and training program.
Coordinate ongoing training campaigns, phishing simulations, and targeted educational initiatives.
Create and support engaging awareness content such as newsletters, intranet posts, presentations, and microlearning modules.
Support security-related communications and respond to inquiries to promote a strong culture of security.
Contribute to risk and compliance activities, including evidence collection, control monitoring, and documentation updates.
Assist with policy and standard reviews to ensure alignment with regulatory and industry requirements.
Participate in internal assessments and support audit preparation efforts.
Support maintenance of the enterprise risk register, ensuring risks are documented, updated, and tracked.
Coordinate with risk owners to collect status updates and validate mitigation progress.
Assist in risk categorization, impact and likelihood assessments, and identification of emerging risks or trends.
Prepare summaries and visualizations for leadership to communicate the university’s risk posture.
Collect and maintain data related to security training participation, phishing results, and program effectiveness.
Prepare dashboards and reports that highlight trends, risks, and opportunities for improvement.
Help identify and refine metrics that demonstrate security program maturity and organizational risk posture.