Security Advisor

About the role

CampusGuard, a Nelnet company, provides information security and privacy consulting and compliance services primarily for campus-based organizations including higher education institutions, healthcare providers, state and local government agencies, utilities and hospitality markets. The Security Advisor role involves assessing and reporting on customer business and technical environments, operations/procedures, administration of infrastructure, compliance programs, and policies and procedures, as measured against relevant industry standards.

Responsibilities

• Consult both onsite and remotely with customers to collect, review, and analyze data related to current institutional policies, business practices and procedures, network infrastructure, IT system configurations and physical security as it all relates to multiple compliance requirements.
• Performing gap analyses of current environments, controls, and programs.
• Review requirements with application and service providers as necessary to achieve information security and compliance objectives.
• Make recommendations for remediation steps required to achieve information security and compliance objectives.
• Upon requests from customers, the Security Advisor may review customer-prepared documents and reports, and provide feedback/guidance to ensure accuracy, or in some cases assist the customer with the preparation of required industry-standard reporting obligations.
• This is a remote work position. Candidate must be able to work in a home office environment with minimal supervision. Ability to travel required (25 to 50%). Other duties as assigned.

Qualifications

• Understanding of and familiarity with information security, compliance, and privacy frameworks and standards including NIST SP 800-171, NIST CSF, ISO 27000, GLBA, GDPR, and PCI DSS.
• Understanding of information systems, networks, and related security issues.
• Understand core compliance program elements such as policies, procedures, training, third-party oversight, device protection, inventory/scope verification, and incident response.
• Understanding of risk assessments and targeted risk analyses.
• Technical understanding of foundational IT models, such as the OSI Model, is highly desirable, along with expertise in modern technologies such as networking protocols, system architecture, cloud computing platforms, virtualization, cybersecurity principles, and emerging IT trends.
• Create high-quality deliverables using appropriate business and technical language.

Skills

• Bachelor’s degree or 5 years’ experience in information security or privacy, preferably in the practical application of security/privacy controls to business systems and processes.
• One of the following industry-recognized audit and information security certifications: Certified Information System Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Internal Auditor (CIA), GIAC Systems and Network Auditor (GSNA).

Benefits

The Pay Range for this role is - $105,000 - $130,000. Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: LINK.