IT Security Professional - 2

About the role

The IT Security Professional is a senior-level technical position within Finance and Operations IT (FOIT) at the University of North Carolina at Chapel Hill. This position serves as a subject matter expert and primary escalation resource responsible for the planning, implementation, and ongoing management of secure, high-performance information technology infrastructure and systems. The role requires advanced and broad expertise spanning information security, server and database administration, network architecture, web application development, and IT project management.

Responsibilities

• Design and maintain network security architecture
• Deploy and manage security monitoring tools
• Direct forensic analysis and incident response
• Establish security policies and procedures in compliance with applicable University, state, and federal requirements
• Serve as a critical escalation resource for peers, ITS management, and departmental units in resolving complex technical incidents and security events
• Participate in security policy and planning decisions
• Provide expert consultation to departmental computing organizations on secure operations, change management processes, segregation of duties, and coding best practices
• Manage IT projects from initiation through completion, ensuring systems that handle sensitive or restricted data are delivered on schedule, within scope, and with appropriate safeguards
• Collaborate with administrators and stakeholders to assess technology needs, recommend solutions, and drive continuous improvement of IT systems and workflows
• Play a central role in disaster recovery and business continuity planning
• Contribute to ongoing monitoring, reporting, and enhancement of the unit's overall security posture

Qualifications

• Advanced expertise in information security, server and database administration, network architecture, web application development, and IT project management
• Strong analytical, communication, and problem-solving skills
• Ability to work effectively across organizational units in a complex university environment

Schedule

Some after-hours availability may be required to respond to security incidents or to implement planned system changes with minimal service disruption.