Information Security Professional II

Your personal information will be retained and/or disposed of in accordance with Florida Statutes and UCF’s records management policies and practices.
** UCF IT:
** UCF IT within the Facilities and Business Operations Center is the central information technology organization at the University of Central Florida, providing technology services and support to faculty, staff, and students. Reporting to the Vice President for Information Technology and Chief Information Officer, UCF IT comprises several key departments, including Infrastructure & Operations, Telecommunications, Enterprise Application Development, Information Security, Instructional Resources, and Client Services.

UCF IT collaborates with university stakeholders through governance frameworks and advisory committees to ensure alignment with UCF’s strategic goals. With a focus on innovation, security, and excellent service delivery, UCF IT supports the university’s mission of teaching, learning, research, and community engagement.
** The Opportunity**:

The UCF IT Department within Facilities and Business Operations is seeking to hire an Information Security Professional II. This role is responsible for monitoring compliance with university IT security policies, standards, and applicable laws; developing and maintaining information security policies, standards, guidelines, and best practices; maintaining the vendor risk management program; and collaborating with colleges and departments to identify risks and recommend corrective measures to strengthen the university’s overall information security posture.
** Responsibilities:
*** Conduct vendor risk reviews and manage the Vendor Risk Management (VRM) program.
* Partner with business units and Info Sec teams to assess compliance, identify risks, and recommend corrective actions.
* Perform risk, compliance, and vulnerability analyses of existing and proposed technology solutions, and communicate recommendations to stakeholders.
* Maintain and monitor compliance with university security policies, standards, applicable laws, and contractual obligations.
* Track remediation efforts, verify security patches, and ensure required configurations are in place.
* Develop and maintain information security policies, standards, guidelines, and best practices.
* Monitor and analyze security data, including vulnerability scans, system assessments, patch details, and configurations.
* Coordinate and track mitigation and remediation activities with relevant parties.
* Research and evaluate new security tools, technologies, and practices to address emerging threats.
* Use automated and manual techniques to identify, validate, and assess security vulnerabilities.
* Proactively identify security trends and evolving cyber-attack techniques to strengthen the university’s security posture.
* Conduct compliance activities to ensure security objectives and best practices are met.
* Provide excellent customer service and foster productive working relationships while protecting the confidentiality, integrity, and availability of institutional data.
* Perform other related duties as assigned.
** Minimum Qualifications**:

Bachelor’s degree and 2 years of relevant experience; or High School Diploma (or equivalent) and 6 years of relevant work experience in lieu of degree. Or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219.
** Preferred Qualifications**:
* 2+ years of progressively responsible professional experience in information security, IT risk management, vendor risk management programs, compliance, or related technical areas.
* Knowledge of information security frameworks, standards, and regulations (e.g., NIST, ISO 27001, FERPA, HIPAA, GLBA).
* Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
* Professional security certifications such as CISSP, CISM, CISA, Security+, or equivalent.
* Familiarity with higher education IT environments and unique compliance requirements.
* Demonstrated ability to research and apply emerging security technologies and practices.
* Strong customer service, analytical, problem-solving, and communication skills to foster…