IT Security Analyst 3 - IS - Data Security - FT - Day - Onsite

University of California-Irvine • Orange, CA

92d • Remote

About The Position

The data security analyst will play a leading role in driving information security analysis, vulnerability remediation and performing risk assessments. This role is a key business enabler to provide information security risk analysis and strategic recommendations for the ongoing improvement of Information Security for UCI Health and the School of Medicine as needed. In this role, you will be engaging with program employees, researchers, stakeholders, and executives to ensure appropriate and up-to-date security management. Remote Work: This position will be predominantly work from home but is required to work onsite depending on the needs of the UCI Health from the Orange or Irvine Campus locations.

Requirements

• Well versed in assessments and able to identify false-positives or vulnerabilities that have not been remediated.
• Must possess the skill, knowledge and ability essential to the successful performance of assigned duties.
• Must demonstrate customer service skills appropriate to the job.
• Excellent written and verbal communication skills in English.
• Demonstrated experience in determining deviation from acceptable configurations.
• Demonstrated experience in conducting web application vulnerabilities and penetration testing.
• Ability to review contractual language and Business Associate Agreements.
• Ability to maintain a work pace appropriate to the workload.
• Ability to develop and/or recommend appropriate mitigation countermeasures.
• Ability to assess levels of risk.
• 5+ years working in a heterogeneous IT environment.
• 5+ years in academic and healthcare IT environments.
• 2+ years of experience in data security assessment and audit.

Nice To Haves

• Thorough understanding of Microsoft Active Directory.
• Knowledge of medical center and academic IT environments.
• Knowledge of HIPAA/HITECH, NIH, FISMA, CMS, CPHS, dbGaP, PCI-DSS and other State and Federal data security requirements and regulations.
• Experience with managing Linux and Windows systems.
• Experience with Cloud Platforms such as Microsoft Azure and AWS.
• Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or other similar credentials.
• Accreditation in Microsoft 365 Certified: Enterprise Administrator Expert.

Responsibilities

• Drive information security analysis and vulnerability remediation.
• Perform risk assessments and provide strategic recommendations.
• Engage with program employees, researchers, stakeholders, and executives.
• Conduct vulnerability assessments and manage threats & vulnerabilities.
• Deliver actionable and timely reports.
• Conduct security awareness training and compliance management.

Benefits

• Medical insurance.
• Sick and vacation time.
• Retirement savings plans.
• Access to a number of discounts and perks.

What This Job Offers

• Industry: Educational Services