IT Security Professional - 2

technology infrastructure and systems. This role requires advanced and broad expertise spanning information security, server and database administration, network architecture, web application development, and IT project management. The IT Security Professional leads efforts to protect University systems and data by designing and maintaining network security architecture, deploying and managing security monitoring tools, directing forensic analysis and incident response, and establishing security policies and procedures in compliance with applicable University, state, and federal requirements. The position serves as a critical escalation resource, supporting peers, ITS management, and departmental units in resolving complex technical incidents and security events. The IT Security Professional actively participates in security policy and planning decisions and provides expert consultation to departmental computing organizations on secure operations, change management processes, segregation of duties, and coding best practices. Additional responsibilities include managing IT projects from initiation through completion, ensuring systems that handle sensitive or restricted data are delivered on schedule, within scope, and with appropriate safeguards. The position collaborates with administrators and stakeholders to assess technology needs, recommend solutions, and drive continuous improvement of IT systems and workflows. The IT Security Professional also plays a central role in disaster recovery and business continuity planning and contributes to ongoing monitoring, reporting, and enhancement of the unit's overall security posture. This position requires strong analytical, communication, and problem-solving skills and the ability to work effectively across organizational units in a complex university environment. Some after-hours availability may be required to respond to security incidents or to implement planned system changes with minimal service disruption. Education and Experience: Certifications: One or more of the following professional certifications is strongly preferred: Certified Information Systems Security Professional ( CISSP ), Certified Information Security Manager ( CISM ), Certified Ethical Hacker ( CEH ), Systems Security Certified Practitioner ( SSCP ), CompTIA Security+, or equivalent industry-recognized credential. Experience in Higher Education: Prior experience in an information security or IT operations role within a higher education institution, particularly within a Finance and Operations or administrative computing environment. Web and Application Development: Experience with web application development, content management systems, and related technologies; familiarity with secure coding best practices and OWASP guidelines. ITSM and Change Management: Familiarity with IT Service Management ( ITSM ) frameworks (e.g., ITIL ) and tools; experience participating in or presenting to a Change Advisory Board ( CAB ). Disaster Recovery and Business Continuity: Experience developing and maintaining disaster recovery plans and business continuity strategies for IT environments. Security Awareness Training: Experience developing and delivering security awareness training programs to diverse end-user audiences. Accessibility Standards: Familiarity with web accessibility standards (e.g., WCAG 2.1) and their application to university web systems and applications. Cloud and Hybrid Environments: Familiarity with cloud-based infrastructure platforms (e.g., Azure, AWS , or Google Cloud) and associated security controls in hybrid on-premises/cloud environments. Point-of-Sale and Transaction Systems: Experience supporting point-of-sale systems, financial transaction processing systems, or university card systems (e.g., one-card systems) in a PCI -compliant environment. Advanced Degree: Master's degree in Cybersecurity, Computer Science, Information Technology, or a closely related field. Essential Skills: Experience and Technical Competencies: Candidates must demonstrate progressively responsible experience in information technology, with significant experience spanning both information security operations and server/systems administration. Required competencies include: Systems Administration * Demonstrated experience installing, configuring, and maintaining Microsoft Windows Server environments across multiple versions and roles (e.g., Active Directory, DNS , DHCP , Group Policy, IIS ) * Experience deploying and managing Microsoft SQL Server in high-availability configurations, including failover clustering, Always On Availability Groups, and related backup and recovery strategies * Fundamental working knowledge of Linux operating systems, including basic administration, patching, and command-line operation * Experience supporting and maintaining enterprise applications composed of multiple interdependent components, including backend relational databases, file servers, and web front-ends; ability to diagnose and resolve issues across the full application stack * Understanding of redundant systems design and high-availability principles, including load balancing technologies (e.g., F5 BIG -IP), web proxy configuration, and related network infrastructure * Ability to perform network tracing and packet analysis to diagnose connectivity, performance, and security issues across complex environments * Experience with server virtualization platforms (e.g., VMware, Hyper-V) and understanding physical-to-virtual and virtual infrastructure management Information Security * Knowledge of information security principles, frameworks, and best practices (e.g., NIST Cybersecurity Framework, CIS Controls, ISO 27001) * Experience with network security architecture, including firewalls, intrusion detection and prevention systems, and access control technologies * Demonstrated experience in security incident response, forensic analysis, and malware analysis * Experience developing, implementing, and maintaining information security policies, standards, and procedures * Proficiency with security monitoring tools, log management, and analysis * Knowledge of identity and access management, account provisioning, and auditing practices Project Management and Communication * Experience managing IT projects, including defining scope, timelines, and deliverables, and proactively managing risks and constraints * Strong written and verbal communication skills, including the ability to translate complex technical concepts for non-technical audiences * Ability to manage multiple priorities and work collaboratively across organizational units in a complex environment. Regulatory Knowledge * Working knowledge of applicable federal, state, and University regulations governing information security and data privacy, including but not limited to FERPA , HIPAA , PCI - DSS , and NC state IT security requirements as applicable to a higher education environment. AA/EEO Statement: The University is an equal opportunity employer and welcomes all to apply without regard to age, color, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, or sexual orientation. We encourage all qualified applicants to apply, including protected veterans and individuals with disabilities.