Specialist - Information Security

Special Instructions

Dear Applicant,

The South Texas College Office of Human Resources will not be held responsible for redacting any confidential or sensitive information from the documents that you attach to your application. Confidential and sensitive information include the following:

• Social Security Number
• Date of Birth
• Age
• Citizenship Status
• Gender
• Ethnicity/Race
• Marital Status
• Applicant Photos
  

* A redaction guide can be found by clicking here.

Please make sure that you omit this information from your application prior to submission. We are advising you that the Office of Human Resources will be forwarding your application to the hiring department as per your submission.

Transcripts
Transcripts must be from an institution accredited by an accrediting agency recognized by the U.S. Department of Education or the Council for Higher Education Accreditation (CHEA).

Foreign transcripts
Applicants submitting employment applications with foreign transcripts must provide transcript equivalency documentation from an approved evaluation service. The evaluation service must be a member of the National Association of Credential Evaluation Services (NACES). The evaluation service links on the following site are provided by South Texas College for your convenience but are not affiliated with South Texas College: NACES Members

Job Description

Department: Information Security

General Statement of Job

The Information Security Specialist assists in the operational and risk management activities that are part of the information security program. Collaborates with other departments to implement and maintain security controls.

Specific Duties and Responsibilities

Essential Functions:

• Assists in the development, implementation and assessment of Key Risk Indicators.
• Collaborates with Information Technology technical staff to assist in the adoption of security standards, guidelines, and procedures based on best practices and compliance requirements.
• Participates in the risk assessment process and helps identify controls to reduce risk to acceptable levels.
• Assists in the vulnerability management program and helps communicate risk to Information Security Analyst.
• Assists in the monitoring and recommendation of operation security controls, such as intrusion detection/prevention, edge and web application firewalls, end-point protection, and security event monitoring.
• Conducts security awareness trainings for small groups or college departments.
• Works closely with technical staff to ensure secure use of information resources.
• Assists in audit activities to ensure compliance with internal and external audit tasks.
• Responding to data breaches and malicious malware attacks.
• Trains staff on information security procedures.
• Performs other duties as assigned.

Required Education and Experience

• Associate's Degree in Computer Science, Networking, Computer Information Systems, Cyber Security, or related field required.
• At least one (1) year of progressive experience in computing and information security, including experience with enterprise servers, networking devices, and web applications, required.
• Experience in higher education, preferred.

Required Knowledge, Skills and Abilities

• Excellent oral, written and interpersonal communication skills.
• Knowledge of security policy development, security education, network penetration testing.
• Knowledge of information security standards and regulations (e.g. CIS Security Benchmarks, NIST 800-series publications, ISO 17799/27002, FERPA, Texas Identity Theft Prevention, etc.).
• Strong analytical and problem-solving skills with the ability to convey technical details using business language readily understood in by all users.
• Must be able to exercise independent judgment and perform tasks and duties with minimum supervision.
• Ability to travel throughout the college district using own means of reliable transportation.
• Demonstrated commitment to achieving the vision and mission of South Texas College.
• Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations.
• Ability to write reports, business correspondence, and procedure manuals.
• Ability to effectively present information and respond to questions from groups of managers, employees, clients, customers, and the general public.
• Ability to solve practical problems and deal with a variety of concrete variables in situation