IT Security Engineer - Risk Management

Job description

Hyde Park Campus

2010008 BSD - Data Security

About the Unit
The Division of the Biological Sciences (BSD) is the largest operating unit of the University of Chicago. It includes the Pritzker School of Medicine, approximately 20 academic units, degree-granting committees, and research centers and institutes. BSD is located on the University's main campus in Hyde Park, ten minutes south of downtown Chicago. BSD's patient care operations are conducted primarily at the University of Chicago Hospital and clinics, which share the same campus.

Job Information

Job Summary:

Under supervision, implement and operate security controls to minimize risk to physical and logical assets of the Biological Sciences Division (BSD) at the University of Chicago and continue to improve efficiencies for the management of all the BSD Information Security program elements in a consistent manner to ensure the confidentiality and integrity of BSD sensitive information. The Risk Management Security Administrator identifies and evaluates risks to the organization, develops policies and procedures to lower identified risk.


  • Perform risk assessments on mission critical information systems or business processes.
  • Identify and document information security vulnerabilities and risks.
  • Develop remediation plans to address identified risks and vulnerabilities.
  • Facilitate risk management governance meetings to gain organizational approval of remediation plans.
  • Track progress on remediation of identified risks and vulnerabilities and provide appropriate reporting.
  • Develop security policies, standards, procedures, checklists, and guidelines tailored to meet the requirements of the organization.
  • Analyze and understand threat intelligence information and how it might impact the organization.

  • Ability to respond to changing priorities, and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness.
  • Ability to weigh business needs against security concern
  • Ability to conceptualize a course of action and to organize for the successful completion of that action critical, often under tight deadlines.
  • Ability to present information in a consistent and concise manner.
  • Ability to communication in a personally effective and socially appropriate manner.

Additional Requirements

  • Bachelor of Science in a related field such as Computer Science, Information Science and Security OR four (4) years of substantial related professional experience
  • Certified Information Systems Auditor (CISA), Certified Information System Security Professional (CISSP) or CompTIA Advanced Security Practitioner (CASP) preferred

  • Basic knowledge of cyber security with one or more of the following security frameworks, FISMA, HIPAA, NIST
  • Basic knowledge of quantifying and qualifying security risks
  • Basic knowledge in Information Technology with a focus on cyber security
  • Basic knowledge of Governance Risk and Compliance technology
  • Basic knowledge of one or more of the following technologies: Qualys, Rapid7, Nessus
  • Direct experience providing customer service

Required Documents:
  • Cover Letter
  • Resume

Benefit Eligibility

Pay Frequency

Pay Range
Depends on Qualification

Scheduled Weekly Hours


Job is Exempt?

Drug Test Required?

Does this position require incumbent to operate a vehicle on the job?

Health Screen Required?

Background Check Required?


Posting Date

Remove from Posting On or Before

Posting Statement:

The University of Chicago is an Affirmative Action/Equal Opportunity/Disabled/Veterans Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national or ethnic origin, age, status as an individual with a disability, protected veteran status, genetic information, or other protected classes under the law. For additional information please see the University's Notice of Nondiscrimination.

Staff Job seekers in need of a reasonable accommodation to complete the application process should call 773-702-5800 or submit a request via Applicant Inquiry Form.

The University of Chicago's Annual Security & Fire Safety Report (Report) provides information about University offices and programs that provide safety support, crime and fire statistics, emergency response and communications plans, and other policies and information. The Report can be accessed online at: Paper copies of the Report are available, upon request, from the University of Chicago Police Department, 850 E. 61st Street, Chicago, IL 60637.

Full time

About Us
The University of Chicago is an urban research university that has driven new ways of thinking since 1890. Our commitment to free and open inquiry draws inspired scholars to our global campuses, where ideas are born that challenge and change the world.

We empower individuals to challenge conventional thinking in pursuit of original ideas. Students in the College develop critical, analytic, and writing skills in our rigorous, interdisciplinary core curriculum. Through graduate programs, students test their ideas with UChicago scholars, and become the next generation of leaders in academia, industry, nonprofits, and government.

To learn more about the university click here





Diversity Profile: University



View more

Learn more on Inside Higher Ed's College Page for University

Arrow pointing right
Job No:
Posted: 2/21/2018
Application Due: 4/22/2018
Work Type: