Data Risk Analyst Jobs in Florida (NOW HIRING)

Job Summary:
The University of Florida is seeking a professional level Cybersecurity Risk Analyst IV to join their Information Security Office. This senior role focuses on conducting information security risk assessments, providing guidance for secure implementation of technology, and improving the university's risk assessment methodologies to protect data and information systems.
Responsibilities:
• Conducting risk assessments for internal information systems using established procedures and control baselines
• Conducting risk assessments on third-party products and services
• Developing remediation plans and recommendations to IT staff on how to address risks identified through the risk assessment
• Preparing executive-level residual risk reports to prompt risk disposition decisions
• Guiding units in creating security plans for all systems
• Establishing and maintaining a non-technical monitoring program including measures of compliance and effectiveness for administrative processes as well as technical controls related to information security
• Assisting units in selecting technology that best fit to UF’s information technology environment and supports UF information security goals
• Providing expert security guidance to help units improve security posture and reduce risk
• Guiding units in developing processes and procedures to implement UF information security policies and standards
• Producing and publishing documentation and guidance to provide direction to units on complying with information security policies and standards
• Evaluating and providing recommendations regarding legal, regulatory, and contractual information security compliance requirements
• Serving as subject matter expert on security control frameworks, establishing, and updating control baselines to be used at UF
• Optimizing procedures used to conduct information security risk assessments
• Contributes to the creation and modification of university information security policies and standards
• Collaborating and advising on changes and improvements to the university’s Governance, Risk, and Compliance (GRC) platform used to conduct risk assessments
• Trains and mentors junior risk analysts, interns, and distributed university IT staff on the risk assessment process
• Contributes content and collateral material to information security training and awareness programs.
Qualifications:
Required:
• Bachelor's degree in an appropriate area and four years of relevant experience; or a high school diploma or equivalent and eight years of relevant experience. Appropriate college coursework may substitute at an equivalent rate for the required experience, but does not negate the minimum degree requirements(s).
• Minimum of 10 years of combined IT and security experience with a broad range of exposure to data, networks, systems, and web applications. Experience conducting cybersecurity risk assessments in large organizations.
• Excellent written and verbal communication skills, outstanding communicator; interpersonal skills; and the ability to work collegially and interact effectively with all constituencies.
• Excellent organizational skills and an ability to prioritize and complete simultaneous projects with minimal supervision.
• Accuracy, attention to detail and a customer service-oriented approach and mindset.
• Advanced level skills in analytical thought, problem-solving, leadership, teambuilding, conflict resolution, strategic planning, management, and IT project management.
• Work collaboratively and build strategic relationships with both internal and external clients.
• Ability to think critically and creatively, have a high standard of integrity and be motivated to incorporate best practices into the organizational structure.
Preferred:
• Bachelors or Masters degree in Computer Science, Cybersecurity, or related field.
• Global Information Assurance Certification (GIAC) Security Essentials (GSEC) or equivalent (preferred), Certified Information Systems Auditor (CISA) or equivalent (preferred), Certified Information Systems Security Profession (CISSP or equivalent) (preferred).
• Security standards, applicable laws, and regulations (National Institute of Standards and Technology (NIST), Health Insurance Portability and Accountability Act (HIPAA), Health Information Technology for Economic and Clinical Health Act (HITECH), Payment Card Industry (PCI), Federal Educational Rights and Privacy Act (FERPA), Florida Statutes).
• Security issues, techniques, and implications across all existing computer platforms.
• Client/server, network topology, network/infrastructure security, network operating systems, web technologies, and e-commerce operations preferred.
• IT auditing and risk management preferred.
• Broad knowledge of principles of a particular field of specialization.
• Awareness of current standards and trends in IT and emerging technology.
Company:
University of Florida is a public land-grant research university in Gainesville, Florida. Founded in 1853, the company is headquartered in Gainesville, USA, with a team of 10001+ employees. The company is currently Late Stage.