Info Security/ID Mgmt Analyst

The University is especially interested in candidates who can contribute to the diversity and excellence of the institution. Applicants are encouraged to include in their cover letter information about how they will further this goal.

The Information Security/Identity Management Analysts conduct analyses of operational data and act upon those analyses in support of the Information Security Office’s mission to identify and remediate threats to the confidentiality, integrity, and availability of information in the University of Vermont’s information ecosystem while also providing the full range of Identity and Account Management services offered by Enterprise Technology Services. This includes administering the digital identities granted to University-affiliated individuals, authorizing them for use of services, and handling policy violations and abuse complaints. These analysts participate in UVM’s Cybersecurity Incident Response Team (CSIRT), collaborate to provide functional supervision to student employees operating in supporting roles, work closely with other Information Security Office staff, and report to the Director of Information Security.

The IS/IMAs must develop and leverage a deep understanding of UVM’s information ecosystem in order to identify intrusion, exfiltration, and other threats to information security using ethical, repeatable, defensible methods. These analysts must exercise discretion and judgment in handling exceptions to account management automation while maintaining the security of University information, protecting individuals’ privacy, and educating constituents. Given the sensitivity of the information and access required to dispatch their duties, the incumbents must acknowledge and faithfully execute a duty to maintain strict confidentiality.

Bachelor’s degree in cyber/information security or bachelor’s in a related field plus recognized information security certification (or ability to acquire within one year) and one to three years’ experience in technology support/information security analysis required. An understanding of technical concepts underpinning internet-connected enterprise services is required.

Effective written communications, especially the ability to produce both procedural documentation and activity/incident documentation in support of the Information Security Office’s self-assessment reporting is required.

Effective customer service, communication, and interpersonal skills; ability to instruct or guide clients at all levels of experience in basic account operations, including account management and basic usage of common applications; effective organizational skills, including ability to manage multiple concurrent tasks and support cases; demonstrated ability to apply judgment and work with accuracy in routine cases and in exceptional situations; proficiency with common productivity applications and command line interfaces in Windows, macOS, or Linux required.

Successful criminal background check required.

Any one or more of the following will strengthen an applicant’s candidacy: Professional experience with at least one of 1) cybersecurity incident response, 2) endpoint/network forensics, and/or 3) continuous security monitoring; ability to produce admissible documentation and maintain evidentiary chain of custody; experience with cyber threat intelligence platforms; experience with constituent education/outreach and proficiency presenting via remote instruction tools; web publishing experience; familiarity with securing cloud-based email, file storage, and applications.

A probationary period may be required for current UVM employees, A probationary period may be required

Exempt

43500.00

82650.00

NU

08/09/2021

No

Information Tech Professional

S2998PO

Information Security Office/11670

001576

1.0

12