IT Security Architect

Montana State University, Inc • Bozeman, MT

34d

About The Position

In support of the Montana State University mission, University Information Technology promotes, develops, delivers, and facilitates the use of information technology services and resources. Duties and Responsibilities Develop and maintain security policies and standards for MSU's four-campus IT environment. Conduct or coordinate risk assessments and audits using the NIST CSF, and other NIST frameworks (NIST 800-171) to identify and prioritize opportunities to mitigate threats and risks to MSU's systems and data. Evaluate and recommend solutions and technologies to improve MSU's security posture. Collaborate with interdisciplinary units to identify, prioritize, and implement mitigating controls for identified risks. This includes, but is not limited to, networking, system administration, enterprise services, desktop and user support, and application development. Assist in the planning for, coordination of, and response to, security incidents. Required Qualifications - Experience, Education, Knowledge & Skills Bachelor's degree and a track record of progressively responsible experience in information technology, or an equivalent combination of education and experience. Advanced knowledge of network protocols, firewalls, and associated risks. Hands-on systems and networking administration experience. Demonstrated experience supporting ERP and other enterprise software and Web application environments. Demonstrated experience with data loss prevention, vulnerability management, threat hunting, anti-malware tools, and SIEMs in a higher education environment. Demonstrated experience providing both technical and functional users with training related to security best practices. Demonstrated experience using a risk-based approach to identify and prioritize new initiatives. Demonstrated experience with assessing functional requirements to ensure a balanced approach to security with business needs in mind. Demonstrated experience with the implementation and maintenance of the principle of least privilege. Preferred Qualifications - Experience, Education, Knowledge & Skills A Bachelor's degree with an emphasis on cybersecurity (Master's degree preferred). Demonstrated ability to coordinate among interdisciplinary units to work toward a common goal. Experience working in a multi-campus higher education environment. Experience responding to, and helping to manage, security incidents. The Successful Candidate Will Ability to communicate effectively both verbally and in written form. Demonstrated discretion in handling sensitive information and circumstances, including high-stress incident handling. Ability to multi-task, prioritize, and rapidly re-prioritize a variety of tasks at different levels of complexity and urgency. Position Special Requirements/Additional Information This job description should not be construed as an exhaustive statement of duties, responsibilities or requirements, but a general description of the job. Nothing contained herein restricts Montana State University's rights to assign or reassign duties and responsibilities to this job at any time. This position is not eligible for sponsorship. Physical Demands To perform this job successfully, an individual must be able to perform each essential duty satisfactorily with or without reasonable accommodations. The requirements listed above are representative of the knowledge, skill, and/or ability required. This position has supervisory duties? No

Requirements

• Bachelor's degree and a track record of progressively responsible experience in information technology, or an equivalent combination of education and experience.
• Advanced knowledge of network protocols, firewalls, and associated risks.
• Hands-on systems and networking administration experience.
• Demonstrated experience supporting ERP and other enterprise software and Web application environments.
• Demonstrated experience with data loss prevention, vulnerability management, threat hunting, anti-malware tools, and SIEMs in a higher education environment.
• Demonstrated experience providing both technical and functional users with training related to security best practices.
• Demonstrated experience using a risk-based approach to identify and prioritize new initiatives.
• Demonstrated experience with assessing functional requirements to ensure a balanced approach to security with business needs in mind.
• Demonstrated experience with the implementation and maintenance of the principle of least privilege.

Nice To Haves

• A Bachelor's degree with an emphasis on cybersecurity (Master's degree preferred).
• Demonstrated ability to coordinate among interdisciplinary units to work toward a common goal.
• Experience working in a multi-campus higher education environment.
• Experience responding to, and helping to manage, security incidents.

Responsibilities

• Develop and maintain security policies and standards for MSU's four-campus IT environment.
• Conduct or coordinate risk assessments and audits using the NIST CSF, and other NIST frameworks (NIST 800-171) to identify and prioritize opportunities to mitigate threats and risks to MSU's systems and data.
• Evaluate and recommend solutions and technologies to improve MSU's security posture.
• Collaborate with interdisciplinary units to identify, prioritize, and implement mitigating controls for identified risks. This includes, but is not limited to, networking, system administration, enterprise services, desktop and user support, and application development.
• Assist in the planning for, coordination of, and response to, security incidents.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Educational Services
• Number of Employees: 1,001-5,000 employees