Title- Intermediate Security Analyst 
Team- Security GRC 

 

A GRC Security Analyst is responsible for performing governance, risk, and compliance tasks that include: a) Conducting security and risk analysis using NIST risk management frameworks; b) Monitoring compliance with security policies, laws, and regulations such as GLBA, GDPR, FERPA, and HIPAA/HITECH; c) Responding to security incidents and providing support as needed; d) Provide actionable security advice through policy or standards creation that support data protection initiatives to protect OU from cybersecurity risks; and e) Create system security plans, security assessments reports, and supporting plan of actions and milestones (POAMs), supporting the NIST 800-171 and NIST 800-53 control frameworks.  

 

Duties:

• 
  Responsible for monitoring the security systems in our organization to include securing online and on-premises infrastructures, filtering out suspicious activity, and finding and mitigating security risks before any breaches can occur.
  
  


• 
  Leads efforts to counter security breaches and anticipates and reduces the likelihood of future security alerts, incidents, and disasters.
  
  


• 
  Defines, plans, implements, maintains, and upgrades security measures, policies, and controls.                   
  
  


• 
  Writes reports and provides insights on the efficacy of the current security policies, incident responses, disaster recovery plans, and other security-related information.
  
  


• 
  Assists with the creation of updates and training programs to secure the network. Trains the employees.
  
  


• 
  Keeps the security systems up to date.
  
  


• 
  Monitors security access and maintains the relevant data.               
  
  


• 
  Conducts vulnerability testing and risk analyses to assess security. Performs internal and external security audits. 
  
  


• 
  Analyzes security breaches to identify the cause and to update incidence responses and disaster recovery plans.
  
  


• 
  Verifies and coordinates security plans with outside vendors.
  
  


• 
  Creates procedures for IT employees and trains in security awareness.
  
  


• 
  Performs various duties as needed to successfully fulfill the function of the position.
  
  

Required Education: Bachelor's Degree AND:

• 36 months experience in Security Administration or a related field

Equivalency: Will accept 48 months related experience in lieu of the Bachelors Degree for a total of 84 months experience



Skills:

• 
  Ability to work in a high-stress environment
  
  


• 
  Excellent verbal and written communication skills, interpersonal, and teaching skills
  
  


• 
  Anticipation, analytical, and problem-solving skills
  
  


• 
  Ability to remain current on the latest technology and best practices in information security
  
  

Working Conditions:

• 
  Physical: Sits for prolonged periods, use of a computer. Manual dexterity, communicate effectively and listens.


• 
  Environmental:  Office work environment.

Why You Belong at the University of Oklahoma: The University of Oklahoma fosters an inclusive culture of respect and civility, belonging, and access, which are essential to our collective pursuit of excellence and our determination to change lives. The unique talents, perspectives, and experiences of our community enrich the learning, and working environment at OU, inspiring us to harness our innovation, creativity, and collaboration for the advancement of people everywhere.

Equal Employment Opportunity Statement:  The University of Oklahoma, in compliance with all applicable federal and state laws and regulations, does not discriminate on the basis of race, color, national origin, sex, sexual orientation, genetic information, gender identity, gender expression, age, religion, disability, political beliefs, or status as a veteran in any of its policies, practices, or procedures. This includes, but is not limited to, admissions, employment, financial aid, housing, services in educational programs or activities, and health care services that the University operates or provides.