Information Security Analyst 2, Digital Technology Solutions

JobsCloseBy Editorial Insights

University of Cincinnati is seeking an Information Security Analyst 2 in Digital Technology Solutions to strengthen the university’s cybersecurity posture through risk management and compliance, partnering with the Office of Information Security, IT and business units to evaluate controls, support audits and promote secure practices campus wide. The role demands clear communication of complex security concepts to technical and non technical stakeholders, development of documentation, mentoring of student workers, and participation in multiple risk projects along with incident response support. Requirements include a Bachelor’s degree in computer science IT computer engineering or a related field or four years of relevant experience; experience with security tool administration scripting and project management; knowledge of system administration and basic network architecture; familiarity with risk and vulnerability management and incident response; and experience with security frameworks such as NIST ISO CIS; certifications like CISSP CISM CRISC GSEC or SEC+ are a plus. Salary 65,000-80,000; onsite in Cincinnati; internal UC applicants must apply via SuccessFactors with a complete profile; tips for success: tailor your resume to the job description, quantify impact, and showcase collaboration across teams. Equal opportunity employer.

Current UC employees must apply internally via SuccessFactors 

Next Lives at the University of Cincinnati

Founded in 1819, the University of Cincinnati ranks among the nation’s best urban public research universities. Home to more than 53,600 students, 12,000 faculty and staff, and over 360,000 living alumni, UC, a Carnegie 1 institution, combines research prowess with a physical setting The New York Times has called “the most ambitious campus design program in the country." UC's momentum has never been stronger as the anchor of the Cincinnati Innovation District, the oldest cooperative education (co-op) program in the country with students earning $94 million annually through paid experiences, an academic health system, and as a member of the Big 12 Conference. The university contributes $10.6 billion in economic impact to the city and $22.7 billion to the state of Ohio. At UC, next is all of us. Learn more at uc.edu. 

UC is a mission-driven organization where we are committed to student success and positively transforming the community through scholarship and service.  We thrive on innovation, making an impact, and fostering an environment where staff and faculty are key contributors to UC’s success.   

Job Overview

This position will primarily work in the area of information security risk management and compliance supporting the university's cybersecurity posture by identifying, assessing, and helping manage information security risks while ensuring alignment with applicable regulatory, legal, and policy requirements. This role partners with other areas of the Office of Information Security, IT, business units, and compliance stakeholders to evaluate controls, support audits and risk assessments, and promote secure and compliant practices across the organization.

Essential Functions

• Clearly convey complex security information to both technical and non-technical stakeholders.
• Participate in developing technical documentation (designs, specifications, processes, workflows) and communications.
• Mentor and delegate work assignments to student workers.  
• Participate in multiple low and moderate risk projects. Work with a team to advance project goals and provide technical assistance.
• Document individual progress on assigned deliverables.
• Gather metrics for area of responsibility.
• Carry out procedures to ensure that all systems, products, and services meet organization security standards.
• Research information security trends to understand the latest vulnerabilities and threats.
• Conduct risk and vulnerability assessments of information systems to identity vulnerabilities, risk, and protection needs.
• Assist with providing artifacts to Governance, Risk & Compliance in relation to internal & external audits.
• With limited support, work with business units to achieve security objectives. Identify, report, and resolve security risks and violations.
• Develop subject matter expertise on security applications and services in the area of responsibility.
• With limited support, conduct information security reviews; determine and document risk and impact on the university; provide baseline remediation recommendations.
• Assist with cyber investigations through forensic fact gathering with a focus on e-discovery.
• Analyze high volumes of logs, network data, and other attack artifacts in support of incident investigations.
• Develop content for and present information security training and awareness programs.
• Develop familiarity with data security laws and regulations applicable to higher education.
• Participate in troubleshooting processes during and outside of normal business hours and participate in change management.
• Mentor non-security teams regarding risk management, information security controls, incident analysis, incident response, monitoring, and other operational tasks (tools, techniques, procedures) in support of technologies managed by the Office of Information Security (OIS).
• Serve as seasoned and proficient information security professional.
• Perform related duties based on departmental need. This job description can be changed at any time.

Required Education

• Bachelor's Degree in in Computer Science, Information Technology, Computer Engineering, or related field.
• Four (4) years of relevant work experience and/or other specialized training can be used in lieu of education requirement.

Required Experience

• Experience in security tool administration.
• Basic scripting skills.
• Basic project management skills.
• Understanding of system administration.
• Basic of network architecture.
• Moderate understanding of risk and vulnerability management.
• Basic awareness of incident response.
• Experience with industry standard security and compliance frameworks.

Additional Qualifications Considered

• The ideal candidate will have education or experience in the field of supporting information security risk management and/or compliance activities, familiarity with security frameworks and standards (e.g., NIST, ISO, CIS), understanding of regulatory and compliance requirements relevant to information security, experience working with audits, risk assessments, or governance processes, and possess strong analytical, documentation, and stakeholder communication skills.
• CISSP, CISM, GISP, CRISC, GSEC, SEC+, or similar information security certification(s) are ideal.

Physical Requirements/Work Environment

• Hearing, listening - Continuously
• Repetitive hand motion (such as typing) - Continuously
• Talking - Continuously
• Sitting - Continuously
• Bending - Seldom
• Climbing stairs/ladders - Seldom
• Crawling - Seldom
• Crouching - Seldom
• Kneeling, squatting - Seldom
• Lifting - over 50 pounds - Seldom
• Lifting - up to 20 pounds - Seldom
• Lifting - up to 50 pounds - Seldom
• Pulling, pushing - Seldom
• Reaching overhead - Seldom
• Standing - Seldom
• Stooping - Seldom
• Walking - Seldom

Compensation and Benefits

UC offers an exceptional benefits package designed to support your well-being, financial security, and work-life balance. (UC Benefits Link) Highlights include:

Salary/Hourly Pay Rate Information: 65,000-80,000

Comprehensive Tuition Remission

UC provides tuition remission for you and your eligible dependents, covering tuition costs for nearly all undergraduate and graduate programs offered by the university.

Robust Retirement Plans

As a UC employee, you won’t contribute to Social Security (except Medicare). Instead, you’ll choose between state pension plans (OPERS, STRS) or an Alternative Retirement Plan (ARP), with UC contributing 14–18% of your salary based on position.

Real Work-Life Balance

UC prioritizes work-life balance with a generous time-off policy, including:

Vacation and sick time

11 paid holidays and additional end-of-year paid time off (Winter Season Days)

6 weeks of paid parental leave for new parents

Additional Benefits Include:

• Competitive salary based on experience
• Comprehensive health coverage (medical, dental, vision, prescription)
• Flexible spending accounts & wellness programs
• Professional development & mentorship opportunities

To learn more about why UC is a great place to work, please visit our careers page at https://www.uc.edu/careers.html

UC is an E-Verify employer.  If hired into this position, you will be required to provide satisfactory proof of employment eligibility by providing acceptable, original forms of identification for employment verification via the Federal I-9 employment verification process. A list of acceptable documents can be seen here: https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents

Important: To apply you must create a profile and submit a complete job application through the UC applicant portal.  We are unable to consider “easy apply” applications submitted via other websites.   For questions about the UC recruiting process or to request accommodations with the application, please contact Human Resources at [email protected]. 

Equal Opportunity Employer.  Building a workplace where all qualified applicants will receive consideration for employment, including Individuals with Disabilities and Protected Veterans.

REQ: 101368 

SF:OMJ SF:RM SF:HEJ, SF:INS SF:HERC SF:DIV SF:LJN SF:IHE