Senior Information Security Analyst

Bowling Green State University•Main Campus (BG), OH

7d•Hybrid

About The Position

The Senior Information Security Analyst is the technical lead for protecting university systems and data. The position designs and implements security architecture, leads the technical work of incident response, evaluates security tools, and drafts enterprise security standards. The incumbent reports to the Director of Information Security and mentors Information Security Analysts on technical methods when asked. This full-time position is located in Bowling Green, Ohio, with the option for a flexible or hybrid work schedule (remote/on-campus).

Requirements

Bachelor’s degree required.
Seven years of experience in information technology.
Five years of experience in information security, specifically designing controls or architecture.
Technical skills in programming or application development, network configuration, or server administration.
Ability to analyze complex systems and work discreetly.
Knowledge of forensic methodology, including evidence acquisition, processing, and reporting.
Ability to communicate risk and mitigation in writing and verbally to non-technical leaders.
Organizational skills sufficient to run a multi-week architecture or incident workstream.
Must be legally authorized to work in the United States at the time of hire and maintain work authorization throughout employment; the university does not offer H-1B or other work authorization visa sponsorship.

Nice To Haves

Bachelor’s degree in Computer Science, Management Information Systems, or a related field.
Certified Information Systems Security Professional (CISSP).
Certified Information Systems Auditor (CISA).
Certified Information Security Manager (CISM).

Responsibilities

Design, construct, and administer application, system, and network security controls, including VPNs, intrusion detection and prevention, endpoint protection, SIEM tools, vulnerability management, and identity-adjacent technical controls.
Lead the design and implementation of information security architecture and evaluate risks to eliminate or minimize their impact.
Investigate and document security incidents, including evidence acquisition and reporting, cooperating with law enforcement when required; serve as technical lead for incident response.
Research advisories, intrusion techniques, and analysis tools; recommend and implement improvements.
Evaluate current controls and identify tools that reduce university risk.
Draft enterprise security standards and procedures for Director approval and review them as the environment changes.
Design security plans for new applications and business processes, and consult with application development and technical support so new systems meet university policy and applicable law.
Act as technical lead and subject matter expert for the Information Security Team on major ITS projects.
Mentor Information Security Analysts on technical methods when requested by the Director or analyst; mentoring does not include assigning work, setting goals, or evaluating employees.
Advise employees and leadership on technology risk.
Perform other duties as assigned.