Information Security Analyst

The Information Security Analyst is responsible for the implementation of the Information Security Office governance, risk management, compliance, and awareness program. The position will conduct risk assessments; coordinate audit engagements with relevant parties; maintain policies, standards and procedures designed to safeguard information and resources; manage information security awareness training. In addition, conduct vulnerability assessments and security reviews through vulnerability scans and penetration tests to determine deviations from acceptable configurations, policies, and standards. Finally, the incumbent will assess levels of risk and recommend appropriate mitigation controls. This position is classified as predominantly remote with occasional visits to campus as needed. Working hours will be based on Pacific Standard Time (PST). The full salary range for the Information Security Analyst is $88,301.52 - $162,425.52 annually. However, the pay scale for this position is up to $121,785.30 annually. We base salary offers on a variety of considerations, such as education, licensure and certifications, experience, and other business and organizational needs. Applicants must have current work authorization when accepting a UCR staff position. Currently, UCR is unable to sponsor or take over sponsorship of an employment Visa for staff. As a University employee, you will be required to comply with all applicable University policies and/or collective bargaining agreements, as may be amended from time to time. Federal, state, or local government directives may impose additional requirements.\n \nConducts various types of Risk Assessments related to various security frameworks as required. Evaluates vendor security postures based on UCOP and campus policies. Reviews and coordinates the execution of UC Data Security agreements. Supports standard risk assessment methodologies and compliance tracking workflows.Supports campus-wide cybersecurity awareness programs and educational initiatives. Coordinates and assists in running campus phishing simulations, and drafts educational content for students, staff, and faculty (including material for new student orientation). Advises campus departments on basic security prevention, data protection levels, and safe digital practices.Applies and administers standard security configurations to control access to networks, hardware, and systems. Implements moderate-scale security controls to prevent unauthorized changes to campus information and infrastructure.Conducts standard vulnerability assessments and mitigation activities. Collects, analyzes, and reports on security incidents to identify causes and implications. Assists in responding to and escalating complex IT security incidents in accordance with established campus and UCOP policies.Evaluates and utilizes approved Artificial Intelligence (AI) tools to assist in cybersecurity risk workflows. Employs AI to streamline the initial analysis of vendor documentation, draft initial risk assessment reports, generate realistic scenarios for campus phishing simulations, and support the creation of adaptive security training content.\n \nBasic skill at reading and interpreting security logs.Ability to follow department processes and procedures.Interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization.Experience using IT security systems and tools. Knowledge of data encryption techniques. Experience analyzing logs for security breaches.Demonstrated skills applying security controls to computer software and hardware.Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.Knowledge of computer hardware, software and network security issues and approaches.Demonstrated experience selecting and applying appropriate data encryption technologies.Knowledge of other areas of IT, department processes and procedures.Experience in incident response and digital forensics including data collection, examination and analysis.Familiarity with leveraging Artificial Intelligence (AI) tools to automate or streamline administrative tasks, report writing, or content generation.\n \nAbility to follow department processes and procedures. Demonstrated experience selecting and applying appropriate data encryption technologies. Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks. Demonstrated skills applying security controls to computer software and hardware. Knowledge of computer hardware, software and network security issues and approaches. Interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization. Experience using IT security systems and tools. Knowledge of data encryption techniques. Experience analyzing logs for security breaches. Basic skill at reading and interpreting security logs.Familiarity with leveraging Artificial Intelligence (AI) tools to automate or streamline administrative tasks, report writing, or content generation. Experience in incident response and digital forensics including data collection, examination and analysis. Knowledge of other areas of IT, department processes and procedures.