Cybersecurity Risk Analyst IV

UF Information Technology (UFIT) is seeking a professional-level Cybersecurity Risk Analyst to join the Information Security Office. This senior role within the Information Assurance team focuses on conducting information security risk assessments, providing guidance for secure implementation of technology and processes, and improving the university’s risk assessment methodologies to protect UF data and information systems in compliance with laws, regulations, policies, and standards.

About the role

The IT Risk Analyst IV serves as a professional-level position in Information Security, supporting the university’s success through service and operational excellence. The incumbent will serve as a subject matter expert in information security, providing advice, documentation, training, and mentoring to junior staff.

Responsibilities

• Executes the UF information risk assessment process:
  • Conducts risk assessments for internal information systems using established procedures and control baselines.
  • Conducts risk assessments on third-party products and services.
  • Develops remediation plans and recommendations to IT staff on addressing identified risks.
  • Prepares executive-level residual risk reports to prompt risk disposition decisions.
  • Guides units in creating security plans for all systems.
  • Establishes and maintains a non-technical monitoring program, including measures of compliance and effectiveness for administrative processes and technical controls.
• Consults on security systems, tools, and procedures to meet defined security requirements and goals:
  • Assists units in selecting technology that aligns with UF’s IT environment and supports information security goals.
  • Provides expert security guidance to help units improve security posture and reduce risk.
  • Guides units in developing processes and procedures to implement UF information security policies and standards.
  • Produces and publishes documentation and guidance for complying with information security policies and standards.
• Contributes to the development of the UF Information Security Risk Management program:
  • Evaluates and provides recommendations regarding legal, regulatory, and contractual information security compliance requirements.
  • Serves as a subject matter expert on security control frameworks, establishing and updating control baselines.
  • Optimizes procedures used to conduct information security risk assessments.
  • Contributes to the creation and modification of university information security policies and standards.
  • Collaborates and advises on changes and improvements to the university’s Governance, Risk, and Compliance (GRC) platform.
• Trains and mentors junior risk analysts, interns, and distributed university IT staff on the risk assessment process.
• Contributes content and collateral material to information security training and awareness programs.

Requirements

• Bachelor's degree in an appropriate area and four years of relevant experience; or a high school diploma or equivalent and eight years of relevant experience.
• Appropriate college coursework may substitute at an equivalent rate for the required experience but does not negate the minimum degree requirement(s).

Qualifications

Preferred Education & Training

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field.
• Global Information Assurance Certification (GIAC) Security Essentials (GSEC) or equivalent (preferred).
• Certified Information Systems Auditor (CISA) or equivalent (preferred).
• Certified Information Systems Security Professional (CISSP or equivalent) (preferred).

Preferred Experience

• Minimum of 10 years of combined IT and security experience with exposure to data, networks, systems, and web applications.
• Experience conducting cybersecurity risk assessments in large organizations.

Preferred Skills

• Excellent written and verbal communication skills; outstanding interpersonal skills.
• Ability to work collegially and interact effectively with all constituencies.
• Strong organizational skills and ability to prioritize and complete simultaneous projects with minimal supervision.
• Accuracy, attention to detail, and a customer service-oriented approach.
• Advanced analytical, problem-solving, leadership, teambuilding, and conflict resolution skills.
• Strategic planning, management, and IT project management skills.
• Knowledge of security standards, applicable laws, and regulations (NIST, HIPAA, HITECH, PCI, FERPA, Florida Statutes).
• Understanding of security issues, techniques, and implications across all existing computer platforms.
• Familiarity with client/server, network topology, network/infrastructure security, network operating systems, web technologies, and e-commerce operations.
• IT auditing and risk management experience (preferred).
• Broad knowledge of principles in a specialized field.
• Awareness of current standards and trends in IT and emerging technology.

Abilities

• Work collaboratively and build strategic relationships with internal and external clients.
• Think critically and creatively with a high standard of integrity.
• Motivation to incorporate best practices into the organizational structure.

About UF Information Technology

Led by Senior Vice President and CIO Elias Eldayrie, UFIT comprises nine departments: Academic Technology; AI² Center; Applications, Development, and Integrations; Business Center; Customer Experience and Resource Planning; Data Platform and Analytics; Information Security Office; Infrastructure and Communication Technology; and Research Computing. UFIT enables teaching, learning, research, and service with state-of-the-art enterprise IT systems, including collaborations with SEC and SUS universities and the HiPerGator supercomputer. For more information, visit UFIT’s strategic plan.

About The University of Florida

One of America’s top universities, the University of Florida drives education, discoveries, healthcare, and community-building for the state, nation, and world. Located in Gainesville, a city of approximately 150,000 residents in North-Central Florida, UF offers a mild climate and extensive outdoor activities, including hiking, biking, and nature photography. Gainesville is within a 2-hour drive of major metropolitan areas like Orlando, Tampa, and Jacksonville, and is 50 miles from Florida’s West Coast and 67 miles from the Atlantic Ocean. The city supports a vibrant cultural scene with large college sports programs, museums, and a performing arts center.

Benefits

UF provides various leave programs based on an employee’s salary plan, including vacation, sick leave, holidays, personal leave days, and paid family leave. The university offers a competitive benefits package.

Pay

$121,294 - $127,234, commensurate based on education and experience.

This position is located in Gainesville, FL, and is not eligible for remote work or work visa sponsorship. A Level 2 Criminal Background Screening is required.