Information Security Engineer

Job Summary/Basic Functions

An Eastern Kentucky University Information Security Engineer is responsible for designing, implementing, and maintaining technical security controls that protect university information systems and data. This role combines hands-on security engineering and operational responsibilities with governance, risk, and compliance (GRC) support to ensure security controls are effectively implemented, monitored, documented, and aligned with institutional policies, legal requirements, and industry best practices.

Minimum Qualifications

Education: Bachelor's Degree is required

Experience: One year of work experience.

Licensure & Certifications: Preferred certifications such as Security+, Certified Information System Security Specialist (CISSP), Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Governance, Risk and Compliance (CGRC).

Job Duties

• 55% - Security Engineering and Operations. - (Essential)
• 30% - Governance, Risk, and Compliance - (Essential)
• 10% - Security Strategy, Policy, and Collaboration - (Essential)
• 5% - Contributes to the effective operations of the department and the University by completing all other duties and special projects as assigned - (Essential)