The department of Information Technology Services at West Virginia University is seeking applications for a Remote Information Security Analyst.
About the Opportunity
Reporting to the Assistant Director of Information Security Services, this position provides technical support for the systems of WVU’s information security program and is a key member of the Information Security team. The position responsibilities include administration and configuration of enterprise information security systems, developing documentation and reports related to security operations, and managing / tracking security and compliance risks. The position will identify, monitor, and analyze security alerts and reports to detect and respond to potential security incidents as part of the Defend Your Data information security awareness program.
We strongly believe in work-life balance and keeping time for things we love outside our work. WVU offers generous benefits, including:
-
37.5-hour work week
-
13 paid holidays (staff holiday calendar)
-
24 annual leave (vacation) days per year (employee leave)
-
18 sick days per year (for when you’re ill, for when you need time to care for sick family, for your own, or your family’s, regularly scheduled medical appointments. Who is family for the purpose of this leave? A lot of people in your life including immediate relatives and in-laws as well as others considered to be members of your household living under the same roof)
-
WVU offers a range of health insurance and other benefits
-
401(a) retirement savings with 6% employee contribution match, eligibility to continue health insurance, and other retiree perks. Looking for more retirement benefits information? Check out retirement health insurance benefits, retirement income, and FAQ’s.
-
Wellness programs
What You'll Do
-
Independently and as part of a team, maintain WVU’s information security program. Ensure WVU’s IT environment is secure according to established policies, procedures, standards, and applicable federal and state regulations. Responsibilities include but are not limited to administration over an enterprise information security system such as antivirus, data loss prevention, vulnerability management. Develop, manage, and maintain a defined set of standard operating procedures supporting these efforts. Continuously support and improve security controls throughout WVU’s IT environment and develop remediation plans for any compliance issue(s). The positions primary focus is:
-
Security Tool Management:
-
Subject matter expert on at least one of the enterprise information security systems, and serve a a backup to one or more additional systems/applications
-
Manage and optimize security tools, ensuring they are configured effectively to provide effective assessment of security risk and how best to mitigate these risks.
-
Evaluate and recommend security technologies to enhance the institution's security portfolio.
-
Security and Compliance:
-
Conduct thorough risk assessments of new and existing University Technology Resources and vendors to evaluate their security controls
-
Collaborate with cross-functional teams to assess their security posture and remediate risks
-
Manage, track, evaluate, and report security and compliance risks as part of WVU's vulnerability and risk management process and standards
-
Develop and support remediation plans for any compliance issues
-
Security Audits and Reviews:
-
Support regular security audits and assessments of applications and vendors to identify and address security vulnerabilities
-
Work closely with responsible parties to implement corrective actions and improvements
-
Document, track, and report on the status of the audits and assessments.
-
Security Incident Response and Analysis:
-
Rapidly respond to security incidents, investigating and containing threats to minimize potential damage
-
Provide insights into the evolving threat landscape and potential impacts on the institution
-
Continuous Improvement:
-
Stay updated on the latest security threats and best practices
-
Implement continuous improvement initiatives to enhance the efficiency and effectiveness of the information security across WVU.
About WVU
West Virginia University is a place of purpose and community. We take pride in our profound impact on the state of West Virginia and are committed to the personal and professional growth of our employees.
From the groundbreaking R1 research at our flagship campus in Morgantown to the career-oriented programs at WVU Potomac State in Keyser, and the technology-intensive programs at WVU Tech in Beckley, the contributions of WVU employees resonate across the state, touching lives and shaping futures.
At WVU, you will discover a supportive community that champions work-life balance and fosters a collaborative atmosphere. Our core values - service, curiosity, respect, accountability and appreciation - unite us as Mountaineers.
Join us at West Virginia University, where your work will make a lasting impact. To learn more about WVU, visit wvu.edu.
West Virginia University is an Equal Opportunity Employer. We invite all qualified applicants regardless of race, color, religion, sex, national origin, age, disability, genetic information, or Veteran status.
