Cybersecurity Risk Analyst

IT Risk Analyst I

The Cybersecurity Risk Analyst serves as an entry level position in the Information Security Office, a unit within UF Information Technology (UFIT), and will support the university’s success through service and operational excellence.

This role within the Information Assurance team of the Information Security Office supports the information security environment throughout the University of Florida (UF) by executing the risk management process to protect the confidentiality, integrity, and availability of UF data and information systems in compliance with law, regulations, policies, and standards at UF. Additionally, this position helps to create a risk aware culture by contributing to information security training and awareness activities.

Some key responsibilities and characteristics of this position are:

• Executes the UF Information risk assessment process, which includes (but is not limited to):
  • Executes the risk management process concluding with risk assessments for all systems
  • Assists units in developing and maintaining an accurate inventory of data and systems
• Follows procedures to recommend security systems, tools, and procedures to meet defined security requirements and goals:
  • Contributes to security guidance to help units improve security posture and reduce risk
  • Suggests processes and procedures to implement UF information security policies and standards
  • Assists units in selecting technology that has already been assessed for security and implemented in UF’s information technology environment
• Contributes to the information security training and awareness program, which includes (but is not limited to):
  • Collaborates with communications, training, web development, and other teams to prepare and produce content, materials, and events
  • Assists as a technical resource for other teams supporting information security training and awareness activities
  • Organizes and staffs information security awareness events

About UF Information Technology

UF Information Technology comprises eight departments reporting to the Vice President and Chief Information Officer: Academic Technology; Applications, Development, and Integrations; Business Center; Customer Experience and Resource Planning; Data Platform and Analytics; Information Security Office; Infrastructure and Communication Technology; and Research Computing. With established governance advisory committees and a set of well-defined, transparent processes aiding decision-making, UFIT strives to provide exceptional IT services in support of UF’s mission. For more information about UFIT and its goals and governance, visit http://www.it.ufl.edu/vp-cio-office/strategic-plan/.

Learn more about UFIT at https://it.ufl.edu/ and @GoGatorsUFIT.

About the University of Florida

The University of Florida (UF) is the state’s oldest, largest, and most comprehensive land grant university, with an enrollment of over 50,000 students and was ranked 6th in the country among public universities (US News and World Report 2023 rankings) and 1st among public institutions in the Wall Street Journal 2023 survey. UF is in Gainesville, a city of approximately 150,000 residents in North-Central Florida, 50 miles from the Gulf of Mexico, 67 miles from the Atlantic Ocean, and within a 2-hour drive to large metropolitan areas (Orlando, Tampa, Jacksonville). The beautiful climate and extensive nearby parks and recreational areas afford year-round outdoor activities, including hiking, biking, and nature photography. UF’s large college sports programs, museums, and performing arts center support various activities and cultural events for residents to enjoy. Alachua County schools are highly rated and offer various programs, including magnet schools and an international baccalaureate program. Learn more about what Gainesville has to offer at Visit Gainesville.

Benefits

Full-time TEAMS employees will accrue vacation leave at a rate of 6.769 hours biweekly/22 days annually and sick leave at 4 hours biweekly/13 days annually. In addition, employees are eligible for ten paid holidays each year.

Vacation-accruing TEAMS employees are eligible for four personal leave days/32 hours per year, assuming full-time status, and are intended to give the flexibility to enable units to close from December 26 to 31, when possible, determined on a unit-by-unit basis.

In addition to paid time off, the University of Florida offers a very competitive benefits package.

Achieving a top-6 public university ranking means we prioritize employing and working with people with various experiences, backgrounds, and perspectives to discover new ways to leverage technology for teaching, learning, research, and the business needs of a comprehensive land-grant institution.

$59,115 - $65,833; commensurate based on education and experience.

The ideal candidate will possess the following education, experience, and skills:

EDUCATION

• Bachelor’s degree in cybersecurity, computer science, business administration, or a related field

EXPERIENCE

• 1-2 years of combined IT and security experience with a broad range of exposure to data, network systems, and web applications preferred
• Novice level knowledge of security issues, techniques, and implications across all existing computer platforms
• Familiarity with security standards, applicable laws, and regulations such as National Institute of Standards and Technology (NIST) and Health Insurance Portability and Accountability Act (HIPAA).
• Awareness of current standards and trends in IT and emerging technology

SKILLS

• Excellent written and verbal communication skills, outstanding communicator; interpersonal skills; and the ability to work collegially and interact effectively with a diverse constituency
• Excellent organizational skills and an ability to prioritize and complete simultaneous projects with minimal supervision

This position requires U.S. work authorization.

This role will be based in one of our Gainesville offices and may include a hybrid schedule of 3 days in the office (Wednesday required), and 2 days remote.

Applicants are required to submit the following with their application:

• Cover Letter
• Resume or CV
• Professional References (Minimum of 3)

The application must be submitted by 11:55 p.m. of the posting end date.