Information Security Analyst I

Position Title:

Information Security Analyst I

Job Group:

Professional & Scientific

Required Minimum Qualifications:

Bachelor’s degree

Job Description:

Summary

Iowa State University (ISU) and its Information Technology Services (ITS) Security team is currently accepting applications for an Information Security Analyst I position. ITS Security helps safeguard the information and technology used by the Cyclone community. As part of this work, ITS Security helps ensure controlled datasets are both secure and compliant with relevant security standards.

Your work will support efforts to secure payment card activity, research with sensitive datasets, and university business and financial records. Your role will be primarily consultative. You’ll provide guidance to the campus community on how best to align processes with external and internal security standards. You will serve as a technical liaison to assess, track, and remediate technical control deficiencies.

To be successful in this role, you should have strong oral communication, business writing, and presentation skills. You’ll be working with many different stakeholder groups, so your ability to guide and influence them is another important skill. Each environment at the university is unique, so you should be good at learning business processes and evaluating the unique risks for each one.

Some key responsibilities include:

• Meet with campus units to understand the people, process, and technology involved in work identified as in-scope for compliance with an external or internal security standard.

• Evaluate the security controls around systems against relevant security standards.

• Identify compliance gaps and general security risks.

• Help design cost-beneficial technical and administrative remedial actions if necessary.

• Communicate the associated security risks, compliance requirements, and necessary remedial steps to key personnel at campus units.

• Liaise with campus unit administrators and other IT professionals to implement remedial actions.

• Answer ad hoc questions from the campus community about security compliance.

• Document work using tools such as Service Now and Atlassian JIRA.

• Review and understand the impact of security language in contractual agreements with external partners.

• Work with researchers and IT professionals to design, document, and implement System Security Plans aligned to standards such as NIST SP 800-171 for research with regulated datasets.