IT Security Analyst 3 Davis, CA, Job ID 76266

IT Security Analyst 3

This is a contract appointment that is 100% fixed and ends two years from date of hire with the possibility of extension if funding permits.

The home department for this position is IT Services. While this position normally is based at 2801 Second Street, Davis, CA, position is eligible for hybrid flexible work arrangements, for applicants living in the State of California, at this time.

Key Responsibilities:

• 25%  Supports the CISO in implementing and establishing cybersecurity programs. Responsibilities include conducting risk assessments, organizing cybersecurity awareness events, promoting a strong cybersecurity culture, and managing vulnerability assessments. The analyst will also assist in identifying and mitigating security risks, ensuring compliance with security policies, and contributing to the continuous improvement of the organization's cybersecurity posture.
• 25%  Implements complex and / or moderate-scale security controls to prevent unauthorized access or changes to campus, medical center or Office of the President information, hardware, software and / or network infrastructure. Independently researches, analyzes and addresses attempted efforts to compromise security protocols. Advises departments on security prevention and best practices.
• 25%  Applies, configures and manages complex security systems. Administers complex security configurations to control access to hardware, software and networks. Applies advanced encryption methods.
• 25%  Collects, examines, analyzes and reports to management regarding the causes, effects and implications of security incidents. Applies advanced IT security concepts, governmental regulations, departmental and campus, medical center or Office of the President policies and procedures to respond to and appropriately escalate complex IT security incidents.

Requirements:

• Bachelor's degree in related area and / or equivalent experience / training.
• Basic skill at reading and interpreting security logs.
• Ability to follow department processes and procedures.
• Interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization.
• Experience using IT security systems and tools. Knowledge of data encryption techniques. Experience analyzing logs for security breaches.
• Knowledge of other areas of IT, department processes and procedures.
• Demonstrated skills applying security controls to computer software and hardware.
• Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.
• Knowledge of computer hardware, software and network security issues and approaches.

Preferred Skills:

• Experience in incident response and digital forensics including data collection, examination and analysis.
• Demonstrated experience selecting and applying appropriate data encryption technologies.

Special Conditions of Employment:

• Must possess valid California Driver's License to drive a County or University vehicle. Ability and means to travel on a flexible schedule as needed, proof of liability damage insurance on vehicle used is required. Reimbursement of job-related travel will be reimbursed according to University policies.
• The University reserves the right to make employment contingent upon successful completion of the background check. This is a designated position requiring a background check and may require fingerprinting due to the nature of the job responsibilities. UC ANR does hire people with conviction histories and reviews information received in the context of the job responsibilities.
• As of January 1, 2014, ANR is a smoke- and tobacco-free environment in which smoking, the use of smokeless tobacco products, and the use of unregulated nicotine products (e-cigarettes), is strictly prohibited.
• Exercise the utmost discretion in managing sensitive information learned in the course of performing their duties. Sensitive information includes but is not limited to employee and student records, health and patient records, financial data, strategic plans, proprietary information, and any other sensitive or non-public information learned during the course and scope of employment. Understands that sensitive information should be shared on a limited basis and actively takes steps to limit access to sensitive information to individuals who have legitimate business need to know. Ensure that sensitive information is properly safeguarded. Follow all organizational policies and laws on data protection and privacy. This includes secure handling of physical and digital records and proper usage of IT systems to prevent data leaks. The unauthorized or improper disclosure of confidential work-related information obtained from any source on any work-related matter is a violation of these expectations.
• Misconduct Disclosure Requirement: As a condition of employment, the final candidate who accepts a conditional offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; received notice of any allegations or are currently the subject of any administrative or disciplinary proceedings involving misconduct; have left a position after receiving notice of allegations or while under investigation in an administrative or disciplinary proceeding involving misconduct; or have filed an appeal of a finding of misconduct with a previous employer.

a. Misconduct means any violation of the policies or laws governing conduct at the applicant's previous place of employment, including, but not limited to, violations of policies or laws prohibiting sexual harassment, sexual assault, or other forms of harassment, discrimination, dishonesty, or unethical conduct, as defined by the employer.

For reference, below are UC's policies addressing some forms of misconduct: 

• UC Sexual Violence and Sexual Harassment Policy
• UC Anti-Discrimination Policy 
• Abusive Conduct in the Workplace