Information Security Specialist-Analyst II/Information Solutions

Medical University of South Carolina • Remote- South Carolina, SC

1d

About The Position

The Information Security Specialist - Analyst II applies established methods to moderately complex governance, risk management, compliance, and operational issues. Working with indirect supervision, the position coordinates with technical and business stakeholders and owns recurring deliverables, reporting, and follow-up activities. The role improves the accuracy, timeliness, and completeness of GRC and field operations outputs, translates control requirements into actionable guidance, supports remediation tracking, and helps protect the confidentiality, integrity, and availability of organizational information assets in support of MUSC’s academic, research, and healthcare missions.

Requirements

• Bachelor’s degree or equivalent work experience.
• At least three years of experience in cybersecurity, compliance or audit, technology operations, or related business functions.
• Hands-on experience collecting and reviewing control evidence, maintaining risk or compliance records, supporting audits or assessments, coordinating field operations requests, documenting exceptions, and tracking remediation actions.
• A role-relevant certification, such as Security+, CySA+, SSCP, CRISC Associate, CISA Associate, Microsoft SC-900, or an equivalent cybersecurity certification.
• Ability to apply established methods to moderately complex control, compliance, risk, and operational issues with limited direction.
• Strong analytical and problem-solving skills, including risk assessment, gap analysis, exception documentation, and remediation tracking.
• Working knowledge of applicable frameworks and requirements, such as ISO 27000, HIPAA/HITECH, FERPA, PCI DSS, NIST Cybersecurity Framework, and NIST SP 800-53.
• Experience with GRC tools, documentation and ticketing workflows, compliance tracking systems, and stakeholder reporting.
• Strong written and verbal communication skills.
• Ability to work independently and manage competing priorities.

Nice To Haves

• Strong familiarity with compliance requirements affecting academic medical centers.
• Knowledge of the NIST Cybersecurity Framework and NIST SP 800-53.
• Experience conducting risk assessments in healthcare or higher education.
• Proficiency with GRC platforms and compliance tracking systems.
• Additional advanced role-relevant certification.

Responsibilities

• Collect and review control evidence and maintain risk and compliance records.
• Support audits and assessments.
• Apply established methods to moderately complex control, compliance, risk, and operational issues.
• Conduct risk assessment, gap analysis, exception documentation, and remediation tracking.
• Coordinate field operations requests, recurring deliverables, reporting, and follow-up across technical and business stakeholders.
• Translate control requirements and technical findings into actionable stakeholder guidance.
• Manage assigned outputs and competing priorities, improving their accuracy, timeliness, and completeness.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level