The University of New Mexico (UNM) Health and Health SciencesInformation Technology (HHS IT) Information Security Office (ISO), supports boththe health and health sciences enterprise components. The ISO is seeking a CloudSecurity Specialist who can provide cloud security expertise for IT services inthe clinical, academic, research and administrative areas across the enterprise,particularly as it envisions its use of cloud services to support the mission. HHSIT has moved from an on-premises to a hybrid environment based primarily onMicrosoft Azure and 365 and seeks to improve and enhance its technical information security in this expansivenew environment. They will foster a sense of collaboration and transparencybetween IT security and leaders.

Undergeneral direction the position will provide technical and strategiccybersecurity leadership in the development and implementation of complex/largeIT initiatives. They will interface with leadership and other professionals to identifykey strategic cybersecurity requirements and implementation strategies toensure that on premises, cloud-based systems, and data are protected. They willestablish the processes required for the successful development andimplementation of complex projects where cybersecurity is paramount. This position will report directlyto the ISO and is a hybrid position, working both on campus and remote.

This CloudSecurity Specialist will:

• Provides technical information security leadership on a variety of highly specialized project-related activities requiring expertise in specific scientific/technical areas for core information technology systems and services.

• Serves as subject matter expert in a multi-disciplinary design group.

• May oversee the supervision and mentoring of personnel, which includes work allocation, training, promotion, enforcement of internal procedures and controls, problem resolution; and, motivates employee to achieve peak productivity and performance.

• Provides advice and recommendations to the Information Security Officer on security matters of interest and concern, and expert recommendations to leadership, IT managers and peers concerning technical and programmatic information security to help ensure that systems and data are secure across the enterprise.

• Oversees the enterprise vulnerability management program, working with the Information Security Officer and the technical staff performing vulnerability-related tasks to identify and remediate vulnerabilities on a timely basis and measure program effectiveness through clear and actionable metrics.

• Coordinates incident response, including planning, documentation, training and execution of appropriate incident response to a wide range of information security scenarios.

• Assesses information security risk for specific systems and environments and provides guidance and recommendations to improve the overall risk assessment processes.

• Evaluates the effectiveness of security controls and give recommendations for remediation and enhancements, particularly in the cloud environment.

• Develops briefs,reports, training/awareness notices, and other documents concerning informationsecurity topics. Leads and/or supports various ad hoc and standing committees concerninginformation security topics.