Information Security Professional II

University of Central Florida•Orlando, FL

4d•Onsite

About The Position

University Operations at the University of Central Florida is hiring an Information Security Professional II to support and strengthen the institution's cybersecurity and compliance program. The role helps safeguard university information assets by assessing risk, monitoring compliance, managing vendor risk reviews, conducting security assessments, and promoting information security best practices. The successful candidate will work with departments, business units, and technology partners to identify vulnerabilities, mitigate risks, and enhance the University's security posture. The position is based on-site at UCF, and on-site presence is an essential function. It may involve driving to locations on and off campus for University business, and a valid Class E driver’s license is required. The work schedule is Monday through Friday, 8:00 a.m. to 5:00 p.m. The anticipated salary range is $64,518 to $80,000, with the final salary based on qualifications, experience, and internal equity. Applicants must be authorized to work for any U.S. employer; visa sponsorship and H-1B transfers are not available. UCF expects employees to reside in Florida when employment begins unless the posting explicitly states otherwise.

Requirements

Bachelor’s degree and 2 years of relevant experience; or a high school diploma or equivalent and 6 years of relevant work experience in lieu of a degree; or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
Valid Class E driver’s license.
Authorization to work for any U.S. employer; visa sponsorship and H-1B transfers are not available.

Nice To Haves

Experience managing or participating in Vendor Risk Management (VRM) programs.
Experience conducting security assessments, vulnerability reviews, and compliance audits.
Knowledge of security frameworks and standards such as NIST, CIS Controls, ISO 27001, FERPA, HIPAA, or PCI-DSS.
Experience working within higher education, government, or large complex organizations.
Professional certifications such as Security+, CISSP, CISM, CISA, CRISC, or related credentials.
Experience with vulnerability management and security monitoring tools.

Responsibilities

Monitor compliance with university information security policies, standards, regulatory requirements, contractual obligations, and applicable laws.
Develop, maintain, and promote information security policies, standards, guidelines, and best practices.
Manage and administer the University's Vendor Risk Management (VRM) program, including vendor security reviews and assessments.
Partner with colleges, departments, and business units to evaluate security and compliance risks and recommend corrective actions.
Perform risk assessments, compliance reviews, vulnerability analyses, and security evaluations of existing and proposed technology solutions.
Analyze security findings and communicate recommendations to stakeholders to improve security posture and reduce risk.
Track remediation activities and verify implementation of required security patches, configurations, and corrective actions.
Monitor vulnerability scans, security assessments, system configurations, and relevant security information to identify potential risks.
Coordinate and track mitigation and remediation efforts across technical and business teams.
Use automated and manual assessment techniques to identify, validate, and evaluate security vulnerabilities.
Research emerging cybersecurity threats, tools, and industry best practices to strengthen the University's security program.
Conduct compliance activities and security reviews to ensure adherence to established security objectives and standards.
Promote security awareness while maintaining productive partnerships and delivering exceptional customer service.
Drive to various locations on and off campus to conduct University business when required.