Skip to main content

This job has expired

CLOUD SECURITY RISK ANALYST

Employer
University of Wisconsin-Madison
Location
Madison

Job Details

CLOUD SECURITY RISK ANALYST

Job no: 99979-AS
Work type: Staff-Full Time
Department:DOIT/SEC/CYBERSECURITY
Location: Madison
Categories: Information Systems/Technology

Position Summary:

The University of Wisconsin-Madison's Cloud Security Risk Analyst will report to the Chief Information Security Officer in Office of Cybersecurity. This position is a key role for the CIO's vision for the future and acts as a focal point for the realization of the institution's overall Cloud strategy, which emphasizes and promotes adoption of secure Cloud-based IT services. This position provides risk analysis and compliance programs that support for the Governance, Risk and Compliance (GRC) domain of the UW-Madison Office of Cybersecurity. Responsibilities include evaluating security risks and compliance strategies; offering direction, guidance and consultation; and making recommendations for the improvement in integration of cloud-based services primarily for University of Wisconsin-Madison. This position coordinates implementing university-wide, proactive and distributed information security management programs to ensure the continuous availability, integrity, and confidentiality information assets that are provided by cloud vendors.

The Cloud Security Risk Analyst will engage campus IT groups to identify security controls for implementation of Cloud solutions that support the instructional technology, research computing, administration, and outreach activities of the institution. Working closely with the UW-Madison Director of Cloud Strategy, the Cloud Security Risk Analyst will recommend and identify security controls that reduce risk to an acceptable level for cloud solutions in accordance with the policies, procedures, and governance guidelines for the institution.

Key Responsibilities include:
* Execute the UW-Madison Risk Management Framework specifically for report the risk level and risk mitigation options for cloud-based integrations.
* Consult with UW-Madison community to enhance the understanding of how to securely use public cloud services.
* Provide guidance to the Enterprise Architecture, developers, and infrastructures teams related to the deployment and on-going management of cloud services.
* Operate continuous diagnostic and mitigations processes to continually assess cloud-based solutions.
* Support cultural and organizational change related to a moving toward a "cloud first" operating model.

Position Duties:

List of Duties

Institutional Statement on Diversity:

Diversity is a source of strength, creativity, and innovation for UW-Madison. We value the contributions of each person and respect the profound ways their identity, culture, background, experience, status, abilities, and opinion enrich the university community. We commit ourselves to the pursuit of excellence in teaching, research, outreach, and diversity as inextricably linked goals.

The University of Wisconsin-Madison fulfills its public mission by creating a welcoming and inclusive community for people from every background - people who as students, faculty, and staff serve Wisconsin and the world.

For more information on diversity and inclusion on campus, please visit: Diversity and Inclusion

Degree and Area of Specialization:

Bachelor's Degree in Information Technology Security or related discipline and two years' experience; OR five or more years of applicable professional services and/or information security experience and expertise.

Minimum Years and Type of Relevant Work Experience:

Required Qualifications:
* Minimum of three years' experience conducting risk assessments using recognized standards (e.g. HIPAA, NIST, COBIT, ISO, or Cloud Security Alliance).
* Minimum of 5 years of experience delivering IT services in a large organization. (A minimum of 7 years experience to be considered at the Senior level.)
* Detailed understanding of network design, security protocols and cloud integration security, with excellent analytical and problem-solving skills.
* Experience and/or training with integrating Cloud services with on premise technologies from Microsoft, IBM, Oracle, etc.
* Must display working knowledge of PCI Data Security, HIPAA and NIST standards along with virtual environment and cloud computing services.
* Knowledge of IT security and data privacy best practices and familiarity with extending on-premise security policies into the public Cloud.
* Experience and/or training with Cloud management (e.g. monitoring, automation, orchestration, etc.), cloud costing, and cloud security tools.
* Experience executing project management skills including design review, threat modeling and risk profiling while working across a large, distributed organization that is representative of a diverse IT community to include policy, regulations, and compliance requirements.

Preferred Qualifications:
* Hold, or be able to obtain within six months, a management-oriented security certification (e.g., CISSP, CISM or GSEC).
* Hold or be able to obtain within 1-year, the Certified Cloud Security Professional certification from ISC(2).
* Detailed understanding of the shared responsibility model for security in the public cloud.

Additional Information:

Please note that DoIT is not able to provide sponsorship for this position.

Department(s):

A060370-INFORMATION TECHNOLOGY/SEC/CYBERSECURITY

Work Type:

Full Time: 100%

Appointment Type, Duration:

Ongoing/Renewable

Salary:

Minimum $83,000 Maximum $96,000 ANNUAL (12 months)
Depending on Qualifications

Instructions to Applicants:

Please click on the "Apply Online" button to start the application process. To apply for this position you will need to upload a cover letter and resume. Your cover letter should specifically address the qualifications listed above.

Contact:

Bradley Molzahn
bradley.molzahn@wisc.edu
608-262-0596
Relay Access (WTRS): 7-1-1 (out-of-state: TTY: 800.947.3529, STS: 800.833.7637) and above Phone number (See RELAY_SERVICE for further information. )

Official Title:

SR IS SPECIALIST(S45BN) or IS SPECIALIST(S45DN)

Employment Class:

Academic Staff-Renewable

Job Number:

99979-AS

The University of Wisconsin is an Equal Opportunity and Affirmative Action Employer. We promote excellence through diversity and encourage all qualified individuals to apply.

If you need to request an accommodation because of a disability, you can find information about how to make a request at the following website: https://oed.wisc.edu/disability-accommodation-information-for-applicants/

Employment will require a criminal background check. It will also require you and your references to answer questions regarding sexual violence and sexual harassment.

The University of Wisconsin System will not reveal the identities of applicants who request confidentiality in writing, except that the identity of the successful candidate will be released. See Wis. Stat. sec. 19.36(7).

The Annual Security and Fire Safety Report contains current campus safety and disciplinary policies, crime statistics for the previous 3 calendar years, and on-campus student housing fire safety policies and fire statistics for the previous 3 calendar years. UW-Madison will provide a paper copy upon request; please contact the University of Wisconsin Police Department.

Applications Open: Aug 12 2019 Central Daylight Time
Applications Close:Aug 26 2019 11:55 PM Central Daylight Time

Organization

In achievement and prestige, the University of Wisconsin–Madison has long been recognized as one of America's great universities. A public, land-grant institution, UW–Madison offers a complete spectrum of liberal arts studies, professional programs and student activities, and many of its programs are hailed as world leaders in instruction, research and public service. Spanning 935 acres along the southern shore of Lake Mendota, the campus is located in the city of Madison.

The university traces its roots to a clause in the Wisconsin Constitution, which decreed that the state should have a prominent public university. In 1848, Nelson Dewey, Wisconsin’s first governor, signed the act that formally created the university, and its first class, with 17 students, met in a Madison school building on February 5, 1849.

From those humble beginnings, the university has grown into a large, diverse community, with about 40,000 students enrolled each year. These students represent every state in the nation, as well as countries from around the globe, making for a truly international population.

UW–Madison is the oldest and largest campus in the University of Wisconsin System, a statewide network of 13 comprehensive universities, 13 freshman-sophomore transfer colleges and an extension service. One of two doctorate-granting universities in the system, UW–Madison’s specific mission is to provide “a learning environment in which faculty, staff and students can discover, examine critically, preserve and transmit the knowledge, wisdom and values that will help insure the survival of this and future generations and improve the quality of life for all.”

The university achieves these ends through innovative programs of research, teaching and public service. Throughout its history, UW–Madison has sought to bring the power of learning into the daily lives of its students through innovations such as residential learning communities and service-learning opportunities. Students also participate freely in research, which has led to life-improving inventions ranging from more fuel-efficient engines to cutting-edge genetic therapies.

The Wisconsin Idea

Students, faculty and staff are motivated by a tradition known as the “Wisconsin Idea,” first started by UW President Charles Van Hise in 1904, when he declared that he would “never be content until the beneficent influence of the university [is] available to every home in the state.” The Wisconsin Idea permeates the university’s work and helps forge close working relationships among university faculty and students, and the state’s industries and government.

Get job alerts

Create a job alert and receive personalized job recommendations straight to your inbox.

Create alert