IT Security Analyst/System Administrator

JOB DESCRIPTION

Develops, implements, and maintains information security program standards and procedures for administrative and academic systems; provides for incident response and remediation support.

Performs auditing, reporting, documentation, and review of information security vulnerabilities and threats; performs vulnerability scans of data networks and computing devices.

Works with systems, network and applications staff to correct security-related vulnerabilities and events when detected.

Provides leadership, work direction, technical advice, and problem-solving assistance to technical staff regarding information security program standards and procedures; acts as a technical liaison with District and campus staff in facilitating information security programs.

Ensures that systems software is properly installed, configured, tested and tuned to maximize information security and operating efficiency; develops logical sequences of steps to be used to produce intended results.

Participates in the design, selection, implementation and maintenance of new products and technologies relating to information security.

Assists and supports higher-level technical personnel with all aspects of planning, design, development, coding, testing, debugging and implementation of complex systems administration for a variety of operating systems.

Monitors, evaluates and maintains systems to ensure minimal interruption of production systems and ensure maximum system performance and availability.

Learns and applies emerging technologies as necessary to perform duties in an efficient, organized, and timely manner.

Participate in District/College efforts to increase the diversity of faculty and staff and to address student achievement gaps; active assistance in the creation of a welcoming and inclusive work and educational environment; attend and participate in diversity, equity and inclusion trainings and events.

Performs related duties as assigned.

PRIMARY PURPOSE

This position is responsible for evaluating, designing, and assisting in the development and implementation of information security solutions for the District. The incumbent also assists in the design, installation and maintenance of enterprise server systems. Responsibilities include performing technical procedures that are necessary to ensure the safety of information systems assets from intentional or inadvertent access or corruption; providing consultation and training on security topics for information technology professionals and functional end users; and providing technical assistance and work direction to personnel as assigned.

WORKING RELATIONSHIPS

The IT Security Analyst/System Administrator maintains frequent contact with various District departments and personnel, IT management and staff, outside contractors and information systems vendors.

KNOWLEDGE, SKILLS AND ABILITIES

Knowledge of information technology security standards and requirements

Knowledge of information technology security trends and tools

Knowledge of LAN/WAN networks, operating systems, and enterprise servers

Knowledge of computer hardware and software, and related peripherals

Knowledge of correct English usage, grammar, spelling, punctuation and vocabulary

Knowledge of interpersonal skills using tact, patience and courtesy

Ability to plan, lead, coordinate and conduct major project or phases of projects

Ability to provide technical advice and leadership to the District

Ability to write and update technical documentation

Ability to work independently with little direction

Ability to communicate efficiently both orally and in writing

Ability to assign work and provide technical work direction to others

Ability to analyze situations accurately and adopt an effective course of action

Ability to plan, organize and prioritize work

Ability to meet schedules and time lines

Ability to understand and follow oral and written directions

Ability to establish and maintain effective working relationships with others

MINIMUM QUALIFICATIONS

Bachelor's Degree in Computer Science, Information Systems, or related field AND a minimum of three (3) years of experience in programming, operating systems, and data communications networks, including leadership experience.

OR

Associate Degree in Computer Science, Information Systems, or related field AND a minimum of five (5) years of experience in programming, operating systems, and data communications networks, including leadership experience.

Commitment to diversity. All applicants must have demonstrated sensitivity to and understanding of the diverse academic, socioeconomic, cultural, disability, gender, gender identity, sexual orientation, and ethnic backgrounds of community college students, faculty and staff. The applicant must be able to demonstrate how their experience with these factors relates to successfully achieving the goals of the position.

DESIRABLE QUALIFICATIONS

Experience with governance, risk, and compliance (GRC), including conducting risk assessments, supporting internal and external audits, and documenting and tracking control gaps through remediation.

Experience securing cloud infrastructure and services, including cloud-native logging, monitoring, and threat detection across multi-cloud environments.

Experience responding to security incidents, including triage, containment, remediation, and documentation.

Experience administering the Microsoft Windows security stack, including Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps), Entra ID security (Conditional Access, multi-factor authentication, identity protection), and Microsoft 365 security and compliance tools (Purview data loss prevention, sensitivity labels, insider risk management, and data governance controls).

Experience supporting vulnerability management and coordinating remediation with system owners.

Familiarity with the MITRE ATT&CK framework and lateral movement mitigation techniques.

Ability to partner with IT and cross-functional teams to drive security initiatives.

Experience managing or contributing to security-related projects.

Strong documentation and stakeholder communication skills.

Industry recognized certification, for instance, CompTIA Security+ and Microsoft Certified: Security Operations Analyst Associate.

Experience assisting and promoting the growth and success of a diverse population of students and employees through the development of interculturally competent and equity minded practices or initiatives.

Prior experience in approaching work and interactions with colleagues and/or students in an equity minded manner. Ability to provide an inclusive and welcoming work/educational environment.

This is a classified position subject to a six-month probationary period. Initial salary placement will be determined by the Office of Human Resources in accordance with Board Policy and is not negotiable. The candidate selected for employment will be required to provide the following: identification and employment eligibility as outlined in the Immigration Reform and Control Act, fingerprints and required medical certification pursuant to statue. NOCCCD will not sponsor any visa applications.

The District may choose to fill one or more positions from this recruitment within eight (8) months.

To ensure consistency and fairness to all applicants, please do not submit materials in addition to those requested. Additional materials will not be considered or returned. Be sure to complete all questions and sections of the application. For questions which may not apply, indicate “N/A” (not applicable). Do not use terms such as “see resume” or “see attached”.

The minimum required number of references for this position is three (3) and will be requested at the finalist and/or offer of employment phase of the hiring process.

All applications will be screened under a process of utmost confidentiality by a committee of representatives from the college community. Possession of the minimum qualifications does not ensure an interview.

Minimum Qualifications – Experience: One year of experience is equivalent to 12 months of experience at a maximum of 40 hours per week (full time). Applicable part-time experience will be converted to the full-time equivalent for the sole purpose of meeting the experience minimum qualification (Example: Twelve (12) months of part time work experience is equivalent to six (6) months full time).

Minimum Qualifications – Education: 24 units are equal to one year of education. As applicable, education must be from a regionally accredited institution and verifiable on a legible unofficial transcript.

Reasonable accommodations for applicants with disabilities may be requested by calling (714) 808-4810 at least three business days in advance of the scheduled examination/interview date.

Evaluations of foreign degrees and/or coursework are required. See our website here for information regarding evaluation of foreign degrees.

NORTH ORANGE COUNTY COMMUNITY COLLEGE DISTRICT NON-DISCRIMINATION STATEMENT

The policy of the North Orange County Community College District is to provide an educational, employment, and business environment, including but not limited to, access to its services, classes, and programs in which no person shall be unlawfully denied full and equal access to the benefits of, or be unlawfully subjected to discrimination on the basis of ethnic group identification, national origin, religion, age, sex, gender, gender identification, gender expression, race, color, medical condition, genetic information, ancestry, sexual orientation, marital status, physical or mental disability, pregnancy, or military and veteran status, or as otherwise prohibited by state and federal statutes, or because they are perceived to have one or more of the foregoing characteristics, or based on association with a person or group with one or more of these actual or perceived characteristics.