Network Security Analyst
Job description
Position Details
Req ID:req8842Position Title:Network Security AnalystPosition Type:Staff Full-TimeOSU Campus:Infrastructure ServicesDepartment:Infrastructure ServicesLocation Address:900 N. Portland Ave
Oklahoma City, Oklahoma, 73107
United States Hiring Supervisor and Contact Info:Tom Hickey
Hiring Range:
(Contingent upon available funding):23.17 - 23.17, Hourly Work Schedule:varies: occasionally includes some evenings and weekends. Job Summary:Job Function:
Responsible for security equipment aswell as analysis, design, implementation and maintenance of directory servicesand network security across the enterprise.
Responsible for information security policy development andmaintenance; design of security policy education, training, and awarenessactivities; monitoring compliance with university’s security policy andapplicable law; and coordinating investigation and reporting of securityincidents.
Essential Job Functions
- Design and/or implementation of IT infrastructure including security controls, firewall and intrusion detection systems.IT systems/server/database administration including systems hardening and security policy implementationIdentity management and administration of IDM systemsConducting risk assessments and use of risk assessment toolsFraud detection or investigations including collaboration with various State agencies.Business process automation development, implementation, managementDevelopment of business policies and procedures, standardization and documentation of processesServes as a campus technical expert on information security risk analysis and compliance matters. Project ManagementWorks with the entire university community in a consultative manner.Works with supervisors to adhere to Oklahoma State University’s Information Security Program.Completes all mandatory training and participates in a minimum of two professional development each yearPerforms other duties as assigned.
The duties listed in this job description are intended onlyas illustrations of the various types of work that may be performed. Theomission of specific statements of duties does not exclude them from theposition if the work is similar, related, or a logical assignment to theposition.
- Minimum of 1 year of experience in Information Technology or network securityInstallation and maintenance of enterprise class software and hardwareImplementing and managing security related projects
- Exceptional information security expertise as well as project management, report writing, business analysis, solution implementation skills and the ability to work under broad policy guidance.
Ability to exercise sound judgment in working collaboratively and communicate effectively within a challenging environment in a visible role
Ability to understand organizational missions, values and goals, analyze information risks which threaten those objectives, recommend and guide large cross-functional and campus-wide teams towards appropriate security control solutions, and assist in implementing and auditing those solutions to materially reduce operational and compliance based exposures.
Excellent verbal and written communication skills, as well as the ability to develop professional relationships across all levels of organizational hierarchy.
Ability to communicate technical concepts and transform them into usable documented material for non-technical users
Understanding of IT enterprise operations, architecture, and IT as a Service, especially in a Higher Education environment.
Ability to grasp technical concepts at all levels of computer systems, from system hardware components and architecture to system integration and implementations.
Must have a high level of personal integrity. Ability to maintain accuracy in handling data collections. Ability to identify, protect, and ethically handle confidential, sensitive and forensic data.
Working knowledge of information security principles and practices
Experience with installation, configuration, monitoring and response to security system including intrusion detection and/or prevention systems
Ability to evaluate and develop approach to solutions
Understanding of information security governance and risk management principals and design
Passion for assisting customers and representing the OSU brand with positivity and professionalism
Evidences a history of demonstrating ethical and professional behavior
- Work will be performed in an office environment with asignificant amount of public contact, in person, by telephone and viaemail. Work may need to be performed outside of normal workinghours including evenings and weekends as needed to complete assignments.
- Duties require extended periods of sitting, standing,talking, listening and computer usage
Work is normally performed in a typical interior office workenvironment. Requires lifting up to 50 lbs.,proper handling of computer and network components. (If an object weighs more than 45pounds, OSU-Oklahoma City requires this to be a two-person lift.) Requires climbing ladders and working in various networkingareas, including tight spaces that may be dusty with variable hot or coldtemperatures
- Requires proper handling of computer and network components,use of both hands in repetitive actions with dexterity
The work environment and physical demands described hereare representative of those required by an employee to perform the essentialfunctions of this job with or without reasonable accommodations. #ZR Oklahoma State University (OSU) strives to provide a safe study, work, and living environment for its faculty, staff, and students. To support this environment and comply with applicable laws and regulations, OSU conducts pre-employment background checks on final candidates. Offers of employment are contingent upon the successful completion of a background check. The type of background check conducted varies by position and can include, but is not limited to, criminal (felony and misdemeanor) history, sex offender registry, motor vehicle history, financial history, and/or education verification. Background checks will be conducted when required by law or contract and when, in the discretion of the university, it is reasonable and prudent to do so.