Information Security Professional II

University of Central Florida•Orlando, FL

6d•$64,518 - $80,000•Onsite

About The Position

University Operations is seeking to hire an Information Security Professional II. This role will support and strengthen the institution's cybersecurity and compliance program. This position plays a critical role in safeguarding university information assets by assessing risk, monitoring compliance, managing vendor risk reviews, conducting security assessments, and promoting information security best practices across the organization. The successful candidate will collaborate with departments, business units, and technology partners to identify vulnerabilities, mitigate risks, and enhance the University's overall security posture.

Requirements

Bachelor’s degree and 2 years of relevant experience; or High School Diploma (or equivalent) and 6 years of relevant work experience in lieu of degree; or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
Valid Class E driver’s license.
May involve driving to various locations on and off campus to conduct University business.
Must be authorized to work for any U.S. employer.
Visa sponsorship is not available for this position, and the university cannot accommodate H‑1B transfers or employment-based visa processing for individuals currently sponsored by another employer.

Nice To Haves

Experience managing or participating in Vendor Risk Management (VRM) programs.
Experience conducting security assessments, vulnerability reviews, and compliance audits.
Knowledge of security frameworks and standards such as NIST, CIS Controls, ISO 27001, FERPA, HIPAA, or PCI-DSS.
Experience working within higher education, government, or large complex organizations.
Professional certifications such as Security+, CISSP, CISM, CISA, CRISC, or related credentials.
Experience with vulnerability management and security monitoring tools.

Responsibilities

Monitor compliance with university information security policies, standards, regulatory requirements, contractual obligations, and applicable laws.
Develop, maintain, and promote information security policies, standards, guidelines, and best practices.
Manage and administer the University's Vendor Risk Management (VRM) program, including conducting vendor security reviews and assessments.
Partner with colleges, departments, and business units to evaluate security and compliance risks and recommend corrective actions.
Perform risk assessments, compliance reviews, vulnerability analyses, and security evaluations of existing and proposed technology solutions.
Analyze security findings and communicate recommendations to stakeholders to improve security posture and reduce risk.
Track remediation activities and verify implementation of required security patches, configurations, and corrective actions.
Monitor vulnerability scans, security assessments, system configurations, and relevant security information to identify potential risks.
Coordinate and track mitigation and remediation efforts across technical and business teams.
Utilize automated and manual assessment techniques to identify, validate, and evaluate security vulnerabilities.
Research emerging cybersecurity threats, tools, and industry best practices to strengthen the University's security program.
Conduct compliance activities and security reviews to ensure adherence to established security objectives and standards.
Promote a culture of security awareness while maintaining productive partnerships and delivering exceptional customer service.