Security Administrator/Information Security Specialist (0080917)

University of Hawaii•Honolulu, HI

12d•Onsite

About The Position

As a member of the UH Information Security team, this role oversees, manages, and maintains the UH information security data protection and compliance programs. The position serves as a security Technical Analyst, managing the Security Information and Event Management (SIEM) system to collect, correlate, and analyze security logs and alerts. It involves monitoring various security hardware, tools, systems, networks, and applications, and leading security incident responses, investigations, and emergency situations. The role also handles legal requests, performs analyses of inappropriate technology use, and continuously monitors security threats and trends. It identifies potential risks and vulnerabilities, develops corrective action plans, and collaborates with internal and external entities to resolve security issues. Additionally, the position provides technical advice, manages capacity planning for new security technologies, develops and maintains a security awareness training program, and promotes security awareness across the UH system. It assists in ensuring compliance with various regulations and standards, performs risk assessments, and provides reports to university officials. The role also involves implementing reporting processes for violations, reviewing the work of other security team members, and ensuring the adoption and enforcement of IT best practices. Continuous monitoring and enhancement of system reliability and security, along with supervising and mentoring IT staff, are key aspects of this role. Other duties as assigned.

Requirements

Possession of a pertinent baccalaureate educational degree in Computer Sciences, Information Security or related field and 5 years of progressively responsible professional information technology experience with responsibilities for information security, of which 2 years of the experience must have been comparable in scope and complexity to the next lower pay band in the University of Hawaii broadband system; or any equivalent combination of education and/or professional work experience which provides the required education, knowledge, skills and abilities as indicated.
Considerable working knowledge of information security as demonstrated by the broad knowledge and understanding of the full range of pertinent standard and evolving information technology concepts, principles and methodologies.
Considerable working knowledge and understanding of the broad technology, systems, hardware and software associated with information security.
Demonstrated ability to recognize a wide range of intricate problems, use reasoning and logic to determine accurate causes, and apply principles and practices to determine, evaluate, integrate, and implement practical and thorough solutions in an effective and timely manner.
Proven ability to comprehend, interpret and implement administrative directives and guidance to ensure IT operations align with organizational standards and industry best practices.
Demonstrated ability to interpret and present information and ideas clearly and accurately in writing, verbally and by preparation of reports and other materials.
Demonstrated ability to establish and maintain effective working relationships with internal and external organizations, groups, team leaders and members, and individuals.
If applicable, for supervisory work, demonstrated ability to lead subordinates, manage work priorities and projects, and manage employee relations.
Strong understanding of IT service management, cybersecurity principles, risk management, and compliance requirements.
Demonstrated experience implementing and maintaining IT best practices, standards, and governance.
Considerable knowledge of information security current practices and threat landscape.
Considerable working knowledge of current information security technologies and tools.
Considerable working knowledge of computer forensics and investigative techniques.
Considerable working knowledge of international, federal, state and local laws, rules, regulations related to information security, privacy and higher education.
Demonstrated ability to speak, read, comprehend, interpret and write fluently in English.
Demonstrated ability to work cooperatively with leadership, supervisor, project staff, and customers in a team environment to accomplish tasks and meet deadlines.
Demonstrated ability to establish and maintain effective working relationships in a positive, service-oriented manner with others.
Demonstrated ability to develop effective training materials.
Demonstrated ability to conduct in-person or virtual training/workshops.
Demonstrated ability to learn and apply new technologies independently and in a timely manner using books, manuals, online research, and other resources.
Demonstrated ability to combine and apply skill sets from many areas of IT.
Working knowledge of management and use of a SIEM.
Working knowledge of systems, systems administration, and network hardware and administration.
Working knowledge of one or more programming or scripting language.
Working knowledge of Internet protocols (such as TCP/IP) and applications.
Ability to manage multiple projects.
Ability to travel out-of-state.
Ability to work a variable work schedule; and work outside normally scheduled work hours including day, night, weekend and/or holiday hours as directed.

Nice To Haves

Certifications related to the information security area (e.g. CISSP, GIAC/GSEC, CISM, etc.)
Working knowledge of configuring and implementing technical security solutions.
Ability to supervise student employees.
Prior cybersecurity experience in or with higher education.
Masters or PhD in a related field.

Responsibilities

Oversees, manages and maintains the UH information security data protection and compliance programs.
Serves as a security Technical Analyst.
Manages Security Information and Event Management (SIEM) system to collect, correlate, and analyze security logs and alerts from critical information systems and analyzes the information to detect, investigate, and respond to suspicious or malicious activity.
Manages and monitors various security hardware, tools, systems/networks and applications in cooperation with Information Technology Services (ITS) staff.
Leads security incident responses, investigations and emergency situations, including those involving policy and regulatory violations.
Handles legal requests and provides remediation support as necessary.
Performs analyses and investigations of reports of inappropriate use of technology or institutional/personal information, including any alleged computer or network security compromises, and assists with the reporting and resolution of such incidents.
Continuously monitors security threats, security trends, technological developments and emerging practices in the information technology, information security and higher education industries.
Identifies potential security risk and vulnerabilities; develops and implements corrective action plans for resolution of issues.
Consults and collaborates with other UH units, external vendors, service providers and/or external institutions to correct security related vulnerabilities and events when detected.
Provides general and technical advice, problem-solving assistance, and answers to questions regarding the information security program, information security issues, compliance programs, policies, standards and procedures.
Performs capacity planning, evaluation, management and implementation of new products and technologies associated with information security in cooperation with other personnel as needed to address new security deficiencies and threats.
Develops and maintains an effective security awareness training program as necessary for UH employees and conducts regular ongoing training.
Actively promotes and communicates security awareness and changes in policies, procedures or training to faculty, staff and students, and provides guidance to affected groups.
Assists the UH Information Security team with ensuring compliance with external regulations, laws and standards such as but not limited to the DOD Cybersecurity Maturity Model Certification program, GDPR, PCI-DSS, HIPAA, FERPA, NIST 800-171, HRS 487N, HRS 92F & UH policies/procedures across the UH system.
Performs information security risk assessments.
Provides reports and/or recommendations on a regular basis to University officials, senior leadership, higher level personnel and functional groups on the operation and progress of efforts.
Implements, maintains and performs the appropriate processes for proper reporting of violations or potential violations to duly authorized reporting authorities and/or enforcement agencies as appropriate and/or required.
Reviews the work of and provides input and guidance on laws, rules, regulations and policy to other security team members; monitors, reviews and directs subordinates and student assistants as necessary.
Follows and implements directives and guidance related to best practices from University of Hawai'i System Information Technology Services.
Ensures the consistent adoption, implementation, and enforcement of recommendations issued through University of Hawai'i System Information Technology Service.
Keeps abreast of recommendations issued through University of Hawai'i System Information Technology Service, and takes timely action as needed.
Continuously monitor and lead initiatives to enhance system reliability, security, and operational efficiency.
Supervise and mentor IT staff to assure that administrative directives and industry best practices are understood and followed.
Other duties as assigned.