The IT Security Analyst is responsible for threat assessment, vulnerability management, security monitoring, access management, security awareness training, compliance, and student workforce for cyber security response.
- Monitor security information and even management for suspicious activities. Investigate and respond to security incidents, including coordinating with other IT staff, campus police, and law enforcement if necessary. Develop and refine incident response plans and coordinate regular incident response drills. Document incidents, responses, and lessons learned to improve future response efforts.
- Collaborate with Academics for training and developing a student workforce for a cyber security command center.
- Responsible for threat assessment and vulnerability management. Conduct annual vulnerability/risk assessments and penetration testing on campus systems. Identify, analyze, and respond to cybersecurity threats and vulnerabilities. Work with the IT Team to implement patches, updates, and remediate vulnerabilities.
- Responsible for Security Awareness Training, including Phishing/Social Engineering training. Implement, oversee, and document Annual Security Awareness Training for all Employees. Implement, oversee, and document quarterly phishing simulations. Work with the IT Director to implement procedures for improving this training.
- Work with Data Governance teams to classify, monitor and protect institutional data. Collaborate on privacy assessments for personal data collection or processing. Ensure legal and compliance with regulations such as GLBA, FERPA, PCI, etc.
- Responsible for Access Management and Identity Security. Oversee, implement, and document Identity and Access Management systems to ensure only authorized access to systems. Implement, oversee, and document , multi-factor authentication and other security measures to protect sensitive resources. Regularly review and audit access permission across campus systems. Reporting results to the IT Director.
Bachelor's degree in information technology systems, computer science, or a related field and experience in information technology systems or related area. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.
Experience in the information technology field to include experience in a security-focused role.
Spartanburg Community College is an affirmative action and equal opportunity employer for all qualified persons regardless of race, color, sex, - including the basis of pregnancy, childbirth, or related medical conditions, national origin, age, religion, or disability.