Cybersecurity Risk Analyst IV

Job No: 536411

Work Type: Full Time

Location: Main Campus (Gainesville, FL)

Categories: Information Technology

Department: 14700000 - IT-SECURITY

Job Description

UF Information Technology (UFIT) is currently seeking a professional level Cybersecurity Risk Analyst to join the Information Security Office, a unit within UFIT.

UF Information Technology (UFIT) enables teaching, learning, research, and service on campus and across the region with state-of-the-art enterprise IT systems.

The IT Risk Analyst IV serves as a professional level position in Information Security, a unit within UF Information Technology (UFIT), and will support the university's success through service and operational excellence. This senior role within the Information Assurance team of the Information Security Office is focused on conducting information security risk assessments, providing guidance and recommendations for secure implementation of technology and processes, and continuing improvement and development of the university's risk assessment methodologies to protect the confidentiality, integrity, and availability of UF data and information systems in compliance with law, regulations, policies, and standards at the University of Florida (UF).

Additionally, the incumbent will serve as a subject matter expert in matters of information security, and provide advice, documentation, training and mentoring to junior staff.

Some key responsibilities and characteristics of this position are:

• Executes the UF Information risk assessment process, which includes: Conducting risk assessments for internal information systems using established procedures and control baselines; Conducting risk assessments on third-party products and services; Developing remediation plans and recommendations to IT staff on how to address risks identified through the risk assessment; Preparing executive-level residual risk reports to prompt risk disposition decisions; Guiding units in creating security plans for all systems; Establishing and maintaining a non-technical monitoring program including measures of compliance and effectiveness for administrative processes as well as technical controls related to information security.
• Consults on security systems, tools, and procedures to meet defined security requirements and goals: Assisting units in selecting technology that best fits UF's information technology environment and supports UF information security goals; Providing expert security guidance to help units improve security posture and reduce risk; Guiding units in developing processes and procedures to implement UF information security policies and standards; Producing and publishing documentation and guidance to provide direction to units on complying with information security policies and standards.
• Contributes to development of the UF Information security risk management program, which includes: Evaluating and providing recommendations regarding legal, regulatory, and contractual information security compliance requirements; Serving as subject matter expert on security control frameworks, establishing, and updating control baselines to be used at UF; Optimizing procedures used to conduct information security risk assessments; Contributes to the creation and modification of university information security policies and standards; Collaborating and advising on changes and improvements to the university's Governance, Risk, and Compliance (GRC) platform used to conduct risk assessments.
• Trains and mentors junior risk analysts, interns, and distributed university IT staff on the risk assessment process.
• Contributes content and collateral material to information security training and awareness programs.

About UF Information Technology

Led by Vice President and CIO Elias Eldayrie, the eight departments comprising UFIT are: Academic Technology; Applications, Development, and Integrations; Business Center; Customer Experience and Resource Planning; Data Platform and Analytics; Information Security Office; Infrastructure and Communication Technology; and Research Computing. UF Information Technology (UFIT) enables teaching, learning, research, and service on campus and across the region with state-of-the-art enterprise IT systems. For more information, visit https://it.ufl.edu/about-ufit/strategic-plan/.

About the University of Florida

One of America's all-around best universities, the University of Florida drives future-making education, eye-opening discoveries, life-saving health care, and community-building collaboration for our state, our nation, and our world. UF is in Gainesville, a city of approximately 150,000 residents in North-Central Florida.

Expected Salary

$121,205-$133,205; commensurate based on education and experience.

Required Qualifications

Bachelor's degree in an appropriate area and four years of relevant experience; or a high school diploma or equivalent and eight years of relevant experience.

Preferred Qualifications

The ideal candidate will possess: Bachelors or Masters degree in Computer Science, Cybersecurity, or related field; Certifications like GIAC Security Essentials (GSEC), Certified Information Systems Auditor (CISA), or Certified Information Systems Security Professional (CISSP); Minimum of 10 years of combined IT and security experience; Excellent communication, organizational, and analytical skills; Knowledge of security standards, laws, and regulations.

Special Instructions to Applicants

Applicants are required to submit: Cover Letter, Resume or CV, and Professional References (Minimum of 3). The application must be submitted by 11:55 p.m. (ET) of September 22, 2025.

Applications Close: September 22, 2025

To apply, visit https://explore.jobs.ufl.edu/en-us/job/536411.