Information Systems and Web Application Security Analyst

About the role

The School of Pharmacy (SoP) IIT department at the University of Wisconsin-Madison seeks an experienced cybersecurity professional to provide outstanding customer service to a diverse group of professionals and end users within the school. This position is the primary point of contact for SoP faculty and staff in support of cybersecurity, compliance, and risk management. This position assists in providing data security and regulatory compliance. The incumbent will evaluate information risks, support recommendations for appropriate security control solutions, and assist in auditing those solutions to materially reduce operational and compliance-based exposures. Additionally, this position will help contribute to the information security management program to support the school's mission of teaching and research, consistent with risk tolerance.

The Information Security Analyst is a member of the Instructional and Information Technology team and works collaboratively across the school and the UW-Madison community. This position reports to the Senior Director of Instructional and Information Technology.

Responsibilities

• Provides secondary support for endpoint management
• Provides secondary support for web application development and testing
• Conducts, reports, and recommends remediation on security risk assessments and testing
• Provides consultation on the implementation of cyberdefense services and tools
• Conducts investigations of emerging threats and incorporates improvements into security risk assessments
• Conducts research into ways to reduce risk for emerging technologies and services
• Assists with investigations for major and high-risk security breaches
• Implements necessary technical and policy changes to improve security and reduce risk

About the department

A global leader in pharmacy education, research, service, and professional development, the University of Wisconsin-Madison School of Pharmacy (SoP) has educated the world's finest pharmacists and scientists for more than 135 years. Ranked in the Top 10, SoP is transforming health care as a global hub of innovation and opportunity. Our programs are designed to prepare students for an ever-changing world of research, patient care, and entrepreneurship in the field of pharmacy and the pharmaceutical sciences.

Compensation and benefits

Qualified candidates can expect to earn between $82,000 and $92,000. Candidates who are highly qualified may earn between $92,000 and $102,000. Exceptionally qualified candidates with additional education, experience, and/or specialized skills may be considered at a higher salary. Employees in this position can expect to receive benefits such as generous vacation, holidays, and paid time off, competitive insurances and savings accounts, and retirement benefits through the Wisconsin Retirement System (WRS).

Required qualifications

• Demonstrated ability to identify risks associated with business processes, operations, information technology, and projects as well as proven record of exploring, advocating for, and implementing changes around best practices
• Working knowledge of cybersecurity industry standards (e.g. HIPAA, NIST, ISO, CIS, etc.)
• Experience using security tools to conduct security assessments, as well as monitoring the IT environment
• Experience working collaboratively, with effective communication skills and outstanding customer service to a diverse group of professionals and end users within SoP and its greater community
• Demonstrated ability to work independently with minimal supervision
• Experience working in an academic setting
• A growth mindset; are eager to innovate and manage technology in a variety of applications and areas

Preferred qualifications

• 2 or more years of experience with information security
• 2 or more years of experience with scripting or programming languages such as Python and PHP
• Detailed understanding of network design, security controls, and system administration with excellent analytical and problem-solving skills
• Experience using standard industry applications to create or update documents to meet compliance reporting requirements and to track detected failures to include validation of mitigation solutions within defined timelines
• Experience executing project management skills including design review, threat modeling, and risk profiling while working across a large, complex, distributed organization that is representative of a diverse IT community to include policy, regulations, and compliance requirements
• Ability to be a security subject matter expert who can explain technical topics to a variety of audiences
• Experience in an academic health care setting, including demonstrated understanding of the unique importance of cybersecurity in supporting the research, teaching, outreach, and administration mission of a public research university
• An industry recognized cybersecurity certification, such as CISSP, CISA, CISM, or GIAC
• Preferred bachelor's degree in information security, computer sciences, information systems, or related field