Information Security Analyst
William & Mary

Position Number:

01311W

Information Security Analyst

Full Time Operational

William & Mary

3H7000 IT

William & Mary Information Technology (W&M IT) provides a reliable, flexible and secure technological environment that enables swift and skilled solutions for rapidly changing needs to advance teaching, learning, research, student success and operational efficiency. By developing and nurturing meaningful relationships and collaborations on campus and beyond, W&M IT engages, inspires and empowers community members to achieve their goals. We develop expertise, promote self-service and encourage experimentation while working to drive relevant and sustainable change.

The Information Security Analyst is responsible for supporting the university's

Information security program by evaluating, improving, and maintaining the security identity management systems and their functions. Reporting to the Chief Information Security Officer (CISO), the Information Security Analyst is primarily responsible for working with the Identity and Access Management Lead Engineer in the maintenance and delivery of identity management services to the university. Other security responsibilities outside of Identity and Access Management (IAM) may also be assigned.

Primary duties and responsibilities will include:

• Research, assess, and recommend innovative approaches, functionalities, and tools, to enhance the university's IAM technologies.
• Work with colleagues, business units, and key stakeholders, to gather requirements and translate them into rules and workflows in the IAM system.
• Work with the CISO and security team to address, correct, and improve identified IAM processes and/or technological deficiencies.
• Assist with annual information security access reviews and internal/external audits.
• Participate on IT project teams, including the university's planned Workday implementation project and assist efforts that are specific to information security or fall within the scope of the CISO.
• Maintain a thorough understanding of various university roles, needs, account and access rules and workflows for university core systems.
• Additional duties as assigned.

While this position is primarily Monday through Friday 8 am to 5 pm, this position may require additional hours to include evenings, weekends and holidays (i.e. special projects, emergencies or high peak times).
Information Technology
This position requires administrative access to the College's information systems and/or sensitive College data. The incumbent is expected to be aware of and adhere to the Information Security policies of the College as well as all applicable federal, state, and local laws. Additionally, the incumbent is expected to follow information security best practices applicable to their job area and to pursue information security training and awareness opportunities when possible.

No

Exempt

No, this is a continuing E&G funded position

12 month - Continuing

Faculty or Staff: 12 month

• Bachelor's Degree OR an equivalent combination of education, training and/or experience.
• Significant experience (typically 2-5 years) working with information system technologies such as operating systems, identity & access management systems, and/or basic information security technologies.
• Working knowledge of building or administering an Identity and Access Management (IAM) solution.
• Working knowledge of accounts and account administration.
• Experience with SQL or other related scripting necessary to automate routine tasks.

• A bachelor's degree in computer science, cybersecurity, information management, or another related discipline is preferred.
• Prior experience working as a Windows Administrator and an advanced understanding of Azure Active Directory (Azure AD).
• Experience programming with any one or more of the following: PowerShell, Python, Perl, JavaScript, or a similar language.
• Experience working for an institution of Higher Education.
• Experience with enterprise level applications such as Ellucian Banner or a similar ERP system.
• Experience managing IT projects.
• Relevant information security certifications are a plus.

Hybrid (works remotely at least 1 day per week but not full-time)

Remote work eligibility is not guaranteed and is subject to approval. Employee eligibility depends on the likelihood of the employee succeeding in a remote work arrangement and the supervisor's ability to manage remote workers. Departments and/or Human Resources may amend, alter, change, delete, or modify eligibility.

Up to $75,000 commensurate with experience.

All hiring rates are commensurate with relevant experience up to the advertised amount considering internal alignment.

U13

William & Mary offers our employees a full array of benefits including retirement, health insurance with options for expanded dental and vision along with group and optional life insurance with coverage for spouse and children, flexible spending accounts, and an EAP (Employee Assistance Program).

Our employees enjoy additional university benefits such as educational assistance, professional development, wellness benefits, and a robust holiday schedule. All employees have access to fitness facilities on campus. Staff members also have access to the university libraries, and much more. To learn more, go to: https://www.wm.edu/offices/uhr/benefits/index.php?type=none

04/16/2024

Yes

William & Mary is committed to providing a safe campus community. W&M conducts background investigations for applicants being considered for employment. Background investigations include reference checks, a criminal history record check, and when appropriate, a financial (credit) report or driving history check.

William & Mary values diversity and invites applications from underrepresented groups who will enrich the research, teaching and service missions of the university. The university is an Equal Opportunity/Affirmative Action employer and encourages applications from women, minorities, protected veterans, and individuals with disabilities.