Job Listings

Information Technology Services (ITS) at West Virginia University is seeking applications for a Remote IInformation Security Analyst.

About the Opportunity

Reporting to the Assistant Director of Information Security Services, this position provides technical support for the systems of Information Technology Services' information security program. This position is a key member of the Information Security Services team responsible for coordination of scans and completion of remediation plans for network vulnerabilities, web application vulnerabilities, securing sensitive information, removal of viruses or malicious software, and conducting IT forensics. This position will also provide varied technical support for Information Security Services' governance risk and compliance system and Defend Your Data information security awareness program.

We strongly believe in work-life balance and keeping time for things we love outside our work. WVU offers generous benefits, including:

• 37.5-hour work week
• 13 paid holidays (staff holiday calendar) - you may be required to work on a holiday.
• 24 annual leave (vacation) days per year
• 18 sick days per year(for when you're ill, for when you need time to care for sick family, for your own, or your family's, regularly scheduled medical appointments. Who is family for the purpose of this leave? A lot of people in your life including immediate relatives and in-laws as well as others considered to be members of your household living under the same roof)
• WVU offers a range of health insurance and other benefits (this position is a benefits-eligible non-classified staff position)
• 401(a) retirement savings with 6% employee contribution match, eligibility to continue health insurance, and other retiree perks. Looking for more retirement benefits information? Check out retirement health insurance benefits, retirement income, and FAQ's.
• Wellness programs

What you'll do:

• Independently and as part of a team, maintain WVU's information security program.Ensure WVU's IT environment is secured according to established policies, procedures, standards, and applicable federal and state regulations.Conduct information security assessments of vendor-hosted and on-premises applications and information systems.Conduct digital forensics on IT assets that have been taken into custody for litigation or administrative cases.Support remediation plans for any non-compliance issue.Develop, manage, and maintain a defined set of standard operating procedures supporting these efforts.
• Serve as an application administrator for the systems that support WVU's information security program focusing on conducting security scans and supporting remediation plans. These systems include vulnerability scanning, securing sensitive data, antivirus, and encryption.
• Prepare and develop technical documentation covering interpretation of information security rules and regulations, along with flow charts and logic diagrams in following industry best practices.Develop and maintain documentation and logs to support remediation plans.Complete service requests associated with WVU's Defend Your Data security awareness program and monitor/address any issues that come into the Defend Your Data email account.
• Evaluate information security tools and processes as instructed by the Assistant Director of Information Security Services.Recommend and implement approved improvements to information security systems, policies, procedures, and standards.

• Bachelor's degree in computer science, information security, or related field or an equivalent combination of education and experience.
• A minimum of four (4) years progressive experience within information technology and/or higher education.
• A minimum of two (2) yearsexperience workingwith running security scans and completing remediation plans.
• A minimum of one (1) year previous experience supporting information systems and writing technical documentation.
• Under general / minimal direction, follow documented information security processes.
• As directed, research information security topics, tools, techniques, and threats.
• Learn procedures for handling service requests and incident resolution.
• Participate in change management processes.
• Prioritize information security issues and work on multiple service requests concurrently. Monitor, update, respond to, and resolve existing service requests.
• Log, update, and monitor service requests with vendors, and monitor vendor communities, e.g., listservs and forums to identify and discover opportunities for improvement in WVU's security posture.
• Perform root cause analysis of information security events to determine cause, severity, and remediation steps.
• Analyze information security issues and provide resolutions utilizing available tools and resources.
• Strong understanding of NIST cybersecurity framework, specifically 800-171, and operational implementation of controls.
• Strong interpersonal skills with ability to interact at all organizational tiers, skill levels, and technical backgrounds.
• Strong communication skills in English, both oral and written.
• Demonstrated ability to prepare technical documentation and justify approach used, resolve complex issues, explain and/or train staff on technical features of an application or process, and the ability to express technical information to non-technical users as well as gather information from them relating to system development to meet their business rules.
• Demonstrated ability to work and communicate in challenging situations.
• Demonstrated ability to logically reason, analyze, and solve problems. Ability to define procedural problems, collect and evaluate data, draw valid conclusions, and project consequences of various alternative recommendations.
• Demonstrated ability to manage multiple tasks and prioritize as needed.
• Demonstrated ability to create, expand, and maintain relationships with peers both within a project team and during daily operations.
• Initiative and motivation to request, accept, and complete tasks as required.
• Demonstrated experience in the delivering quality results, meeting user expectations, and completed on time.
• Demonstrated ability to work as a member of a team of diverse skill levels and expertise from multiple areas, functioning in an optimum role for team success.
• In depth knowledge of general office software including word-processing, database, and spreadsheet applications {prefer Microsoft Office including Word, and Excel).
• Experience in delivering and supporting applications with stringent security requirements.
• Ability to design, install, configure, and maintain information security systems in a higher education environment.

Requirements

• An information security certification, e.g. from CompTIA, Cisco, or GIAC is preferred but not required.

About WVU

At West Virginia University, we leverage our talents and resources to create a better future for our state and the world. As West Virginia's land-grant university, WVU has three campuses that touch each corner of the state. The WVU System includes 518 buildings on 15,880 acres, Extension Service offices in all 55 counties, ten experimental farms and four forests.

From the groundbreaking R1 research of our flagship campus in Morgantown to the career-oriented programs of WVU Potomac State in Keyser to the technology-intensive programs at WVU Tech in Beckley - the contributions of WVU employees directly impact the 1.8 million people of West Virginia every day, no matter their role or position.

Service, curiosity, respect, accountability, and appreciation are the core values that unite Mountaineers, inspiring one another to work tirelessly and support others as they seek to reach new heights. After all, when you're a Mountaineer, impossible is just another mountain to climb.

Creating an inclusive, engaged, and dynamic learning environment is core to WVU's academic mission. We welcome candidates who can contribute a range of ideas, approaches and experiences.

To learn more about West Virginia University, visitgo.wvu.edu. View current career opportunities atcareers.wvu.edu.

West Virginia University is proud to be an Equal Opportunity employer and is the recipient of an NSF ADVANCE award for gender equity. The University values diversity among its faculty, staff, and students, and invites applications from all qualified applicants regardless of race, ethnicity, color, religion, gender identity, sexual orientation, age, nationality, genetics, disability, or Veteran status.