Information Security Professional II

University of Central Florida•Orlando, FL

2d•Onsite

About The Position

University Operations at UCF is seeking an Information Security Professional II to support the university’s Identity Governance and Access Management (IGAM) program. The role administers, monitors, and improves identity lifecycle and access management processes for enterprise systems and institutional users. It performs operational and technical work involving identity provisioning, access governance, role-based access control, privileged access processes, compliance activities, reporting, documentation, and stakeholder support. The position works with campus partners to help ensure appropriate access to university resources while maintaining security, compliance, and data integrity. The role is based on-site at UCF, which is the primary work location and an essential function. The position may involve driving to locations on and off campus for university business and requires a valid Class E driver’s license. The work schedule is Monday through Friday, 8:00 a.m. to 5:00 p.m. The anticipated salary range is $64,518 to $80,000; final salary depends on qualifications, experience, and internal equity. UCF is hiring for multiple roles and may consider applicants for additional Information Security Professional II vacancies in the department. Applicants must be authorized to work for any U.S. employer; visa sponsorship and H-1B transfers are not available. UCF expects employees to reside in Florida when employment begins unless the posting explicitly states otherwise.

Requirements

Bachelor’s degree and 2 years of relevant experience; or high school diploma (or equivalent) and 6 years of relevant work experience in lieu of a degree; or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
A valid Class E driver’s license.
Authorization to work for any U.S. employer; visa sponsorship and H-1B transfers are unavailable.

Nice To Haves

Experience with Identity Governance and Administration (IGA) or Identity and Access Management (IAM) platforms.
Knowledge of identity lifecycle management, provisioning, and de-provisioning processes.
Experience supporting role-based access control (RBAC) and access governance practices.
Familiarity with privileged access management concepts and controls.
Experience supporting audits, compliance reviews, and access certifications.
Strong analytical, problem-solving, and documentation skills.
Ability to communicate effectively with technical and non-technical stakeholders.
Experience working in higher education or other complex enterprise environments.

Responsibilities

Manage identity lifecycle activities for students, faculty, staff, researchers, guests, affiliates, and sponsored accounts.
Perform account provisioning, de-provisioning, modifications, affiliation updates, and reconciliation across institutional systems.
Ensure identity processes are accurate and comply with university policies and standards.
Review, process, and support access requests for enterprise applications and services.
Apply established access models, business rules, and authorization procedures to provide access based on role and business need.
Assist users and business units with access-related questions and requests.
Maintain role-based access control structures, entitlement mappings, and access assignment processes.
Support updates, testing, and documentation of access models and authorization frameworks.
Partner with business and technical teams to resolve access-related issues.
Support periodic access reviews, audit requests, and compliance assessments.
Collect and validate access records, identify potential discrepancies, and track remediation.
Maintain documentation and evidence for compliance and audit activities.
Support governance for privileged accounts, administrative access, service accounts, application registrations, and other high-risk identities.
Maintain privileged-access inventories, assist with reviews, and support exception tracking.
Help ensure privileged access processes are documented, controlled, and auditable.
Provide support to university stakeholders, application owners, distributed IT teams, and information security partners.
Troubleshoot identity and access issues within the role’s scope and escalate complex governance or risk matters as appropriate.
Serve as backup support for other IGAM team functions.
Develop and maintain standard operating procedures, work instructions, and knowledge base articles.
Identify opportunities to improve efficiency, strengthen controls, reduce manual effort, and enhance the user experience.
Support continuous improvement initiatives within the IGAM program.
Prepare and maintain identity and access management reports using approved tools and data sources.
Perform data quality reviews, reconciliation activities, and access trend analysis.
Protect sensitive identity, access, and security information while supporting management reporting needs.