Security Analyst

Application Deadline: April 7, 2025

Salary: $47,400

About Arkansas Tech:

Founded in 1909, Arkansas Tech University is a comprehensive public institution with a rich history, maintaining regional accreditation from the Higher Learning Commission (HLC) and classification as a Southern Regional Education Board (SREB) level III institution. ATU was ranked the No. 1 regional public university in Arkansas by U.S. News and World Report in 2021-22 and 2022-23 and CollegeNET recognizes ATU as the No. 1 institution in Arkansas on its Social Mobility Index. Since 2019, Arkansas Tech has been the host institution for the prestigious Arkansas Governor’s School. The 559-acre Russellville campus, located in the scenic Arkansas River Valley between the Ozark and Ouachita Mountains, is just one hour from the capital city of Little Rock. Russellville features a charming blend of historic and modern architecture as well as the recreational opportunities provided by Lake Dardanelle and several state parks. Offering more than 100 undergraduate degree programs and more than 40 graduate degree and certificate programs across five academic colleges and two campuses, Arkansas Tech strives to provide a solid educational foundation for life-long learning to a diverse community. For more information about Arkansas Tech University and the surrounding community, please visit our website at www.atu.edu/hr to find our “Live Here” informational resources.

Position Summary:

The Information Systems Security Specialist is a professional responsible for maintaining and improving an organization's security posture by implementing and monitoring security policies, procedures, and technologies. They work closely with other IT professionals to ensure that security measures are implemented in compliance with industry standards and best practices.

The position requires expertise in identifying and mitigating security risks and vulnerabilities, as well as knowledge of security tools and technologies, such as firewalls, intrusion detection/prevention systems, and encryption technologies. The specialist must also stay up-to-date with the latest security threats and emerging trends in cybersecurity.

In addition to technical skills, the Information Systems Security Specialist must possess strong communication and collaboration skills to work effectively with stakeholders across the organization, from IT professionals to executives. The specialist must be able to communicate security risks, provide recommendations for improving security, and work with stakeholders to develop and implement security solutions.

Overall, the Information Systems Security Specialist plays a critical role in protecting an organization's information assets and ensuring the confidentiality, integrity, and availability of data.

Essential Duties and Responsibilities:

The essential duties and responsibilities of the Information Systems Security Specialist include:

Developing, implementing, and maintaining security policies, procedures, and guidelines to ensure the confidentiality, integrity, and availability of information.

Conducting security audits and risk assessments to identify vulnerabilities and develop strategies to mitigate them.

Monitoring and analyzing network traffic and system logs to detect and respond to security incidents.

Maintaining and configuring security tools, such as firewalls, intrusion detection/prevention systems, and vulnerability scanners.

Providing technical guidance and support to IT teams to ensure secure system configurations and operations.

Evaluating and recommending security technologies and solutions to meet the organization's needs and requirements.

Keeping up-to-date with the latest security threats, vulnerabilities, and trends, and recommending appropriate countermeasures.

Conducting security awareness training for employees to promote a culture of security.

Participating in incident response and disaster recovery planning and testing.

Collaborating with internal and external stakeholders to ensure compliance with security standards and regulations.

Overall, the Information Systems Security Specialist is responsible for designing, implementing, and maintaining effective security measures to protect an organization's information assets from cyber threats.

The specialist must also stay up-to-date with emerging threats and technologies to maintain a strong security posture for the organization.

Knowledge, Skills, and Abilities:

The required knowledge, skills, and abilities of the Information Systems Security Specialist typically include:

Strong understanding of information security concepts, principles, and best practices.

In-depth knowledge of security technologies, including firewalls, intrusion detection/prevention systems, and encryption technologies.

Familiarity with security standards and regulations, such as ISO 27001, NIST, and GDPR.

Knowledge of common networking protocols and technologies, such as TCP/IP, VPNs, and VLANs.

Strong analytical and problem-solving skills to identify and mitigate security risks.

Excellent communication and collaboration skills to work effectively with internal and external stakeholders.

Ability to analyze and interpret technical data and provide clear, concise reports and recommendations.

Familiarity with security assessment tools and techniques, such as vulnerability scanning and penetration testing.

Understanding of security incident response procedures and protocols.

Ability to manage multiple priorities and projects while meeting deadlines.

Overall, the Information Systems Security Specialist must possess a strong technical foundation in cybersecurity, along with excellent communication and collaboration skills to work effectively with stakeholders across the organization. They must also stay up-to-date with emerging threats and technologies to maintain a strong security posture for the organization.

Minimum Requirements:

Bachelor's degree in computer science, information security, or a related field, along with at least two years of experience in information security concepts, principles, and best practices.

Preferred Qualifications:

Master's degree in computer science, information security, or a related field.

Professional certification in information security, such as CISSP, CISM, CCSP or ability to obtain within 1-year of employment.

Experience with security tools and technologies, such as SIEM, DLP, and threat intelligence platforms.

Familiarity with cloud security, such as AWS or Azure.

Experience with security incident response and digital forensics.

Familiarity with compliance requirements, such as HIPAA, PCI-DSS, or SOX.

Understanding of DevSecOps practices and tools.

Strong knowledge of emerging security technologies, such as zero-trust architecture and AI-based security.

Experience with security program management and strategy development.

Knowledge of security risk management methodologies, such as FAIR or ISO 31000.

Overall, preferred qualifications may vary depending on the organization's industry, size, and specific security needs. The qualifications listed above are meant to be a starting point for a potential candidate's preferred qualifications.

Work Location, Environment, and Physical Demands:

This position may require work either on-site at an office, which may be shared, or at an approved remote location. The ability to work with computer screens and systems for extended periods is necessary, as is the capacity to stand or sit for extended periods while performing job duties. The position may also require occasional work from remote locations, and clear communication skills are necessary. The ability to lift and carry objects weighing up to 25 lbs may be necessary. The job may also require extended work hours or weekend work at times. The ability to be contacted and respond as needed is essential. The candidate must be able to travel as necessary by driving, riding, flying, or using other public transportation systems, both within and outside the state. Successful completion of a criminal background check is a requirement for this position.

What to Submit:

Cover Letter, Resume, Copy of Training Completion or Certificates.

To be considered for the position of Security Analyst, all applications must be received and processed through our applicant tracking system Cornerstone prior to the closing date on April 7, 2025 before 6:00 pm central time.

Please go to https://atu.csod.com/ats/careersite/search.aspx?site=1&c=atu to