IT Security Professional - 2

One of the best college towns and best places to live in the United States, Chapel Hill has diverse social, cultural, recreation and professional opportunities that span the campus and community.

University employees can choose from a wide range of professional training opportunities for career growth, skill development and lifelong learning and enjoy exclusive perks for numerous retail, restaurant and performing arts discounts, savings on local child care centers and special rates on select campus events. UNC-Chapel Hill offers full-time employees a comprehensive benefits package, paid leave, and a variety of health, life and retirement plans and additional programs that support a healthy work/life balance.

This position may be eligible for a hybrid work arrangement that may include partially remote work location, consistent with System Office policy. UNC Chapel Hill employees are generally required to reside within a reasonable commuting distance of their assigned duty station.

This position requires on campus work in various buildings, onsite meeting attendance and in case of emergency day/night/weekend work in Giles Horney complex and/or UNC IT Data Centers.

Primary Purpose of Organizational Unit

The Finance and Operations Information Technology Department provides innovative, and responsive technology services to the University’s business units in support of the University’s mission of teaching, research, and public service. The department strives to provide technology to improve business processes and communication, reduce costs, and increase customer satisfaction. It is part of the F&O Service Center of Excellence (SCE).

Position Summary

The IT Security Professional is a senior-level technical position within Finance and Operations IT (FOIT) at the University of North Carolina at Chapel Hill. This position serves as a subject matter expert and primary escalation resource responsible for the planning, implementation, and ongoing management of secure, high-performance information technology infrastructure and systems.

This role requires advanced and broad expertise spanning information security, server and database administration, network architecture, web application development, and IT project management. The IT Security Professional leads efforts to protect University systems and data by designing and maintaining network security architecture, deploying and managing security monitoring tools, directing forensic analysis and incident response, and establishing security policies and procedures in compliance with applicable University, state, and federal requirements.

The position serves as a critical escalation resource, supporting peers, ITS management, and departmental units in resolving complex technical incidents and security events. The IT Security Professional actively participates in security policy and planning decisions and provides expert consultation to departmental computing organizations on secure operations, change management processes, segregation of duties, and coding best practices.

Additional responsibilities include managing IT projects from initiation through completion, ensuring systems that handle sensitive or restricted data are delivered on schedule, within scope, and with appropriate safeguards. The position collaborates with administrators and stakeholders to assess technology needs, recommend solutions, and drive continuous improvement of IT systems and workflows. The IT Security Professional also plays a central role in disaster recovery and business continuity planning and contributes to ongoing monitoring, reporting, and enhancement of the unit’s overall security posture.

This position requires strong analytical, communication, and problem-solving skills and the ability to work effectively across organizational units in a complex university environment. Some after-hours availability may be required to respond to security incidents or to implement planned system changes with minimal service disruption.

Minimum Education and Experience Requirements

Master’s and 1-2 years’ experience; or Bachelors and 2-4 years’ experience; or will accept a combination of related education and experience in substitution.

Required Qualifications, Competencies, and Experience

Experience and Technical Competencies: Candidates must demonstrate progressively responsible experience in information technology, with significant experience spanning both information security operations and server/systems administration. Required competencies include:

Systems Administration

• Demonstrated experience installing, configuring, and maintaining Microsoft Windows Server environments across multiple versions and roles (e.g., Active Directory, DNS, DHCP, Group Policy, IIS)
• Experience deploying and managing Microsoft SQL Server in high-availability configurations, including failover clustering, Always On Availability Groups, and related backup and recovery strategies
• Fundamental working knowledge of Linux operating systems, including basic administration, patching, and command-line operation
• Experience supporting and maintaining enterprise applications composed of multiple interdependent components, including backend relational databases, file servers, and web front-ends; ability to diagnose and resolve issues across the full application stack
• Understanding of redundant systems design and high-availability principles, including load balancing technologies (e.g., F5 BIG-IP), web proxy configuration, and related network infrastructure
• Ability to perform network tracing and packet analysis to diagnose connectivity, performance, and security issues across complex environments
• Experience with server virtualization platforms (e.g., VMware, Hyper-V) and understanding physical-to-virtual and virtual infrastructure management

Information Security

• Knowledge of information security principles, frameworks, and best practices (e.g., NIST Cybersecurity Framework, CIS Controls, ISO 27001)
• Experience with network security architecture, including firewalls, intrusion detection and prevention systems, and access control technologies
• Demonstrated experience in security incident response, forensic analysis, and malware analysis
• Experience developing, implementing, and maintaining information security policies, standards, and procedures
• Proficiency with security monitoring tools, log management, and analysis
• Knowledge of identity and access management, account provisioning, and auditing practices

Project Management and Communication

• Experience managing IT projects, including defining scope, timelines, and deliverables, and proactively managing risks and constraints
• Strong written and verbal communication skills, including the ability to translate complex technical concepts for non-technical audiences
• Ability to manage multiple priorities and work collaboratively across organizational units in a complex environment.

Regulatory Knowledge

• Working knowledge of applicable federal, state, and University regulations governing information security and data privacy, including but not limited to FERPA, HIPAA, PCI-DSS, and NC state IT security requirements as applicable to a higher education environment.

Preferred Qualifications, Competencies, and Experience

Certifications: One or more of the following professional certifications is strongly preferred: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Systems Security Certified Practitioner (SSCP), CompTIA Security+, or equivalent industry-recognized credential.

Experience in Higher Education: Prior experience in an information security or IT operations role within a higher education institution, particularly within a Finance and Operations or administrative computing environment.

Web and Application Development: Experience with web application development, content management systems, and related technologies; familiarity with secure coding best practices and OWASP guidelines.

ITSM and Change Management: Familiarity with IT Service Management (ITSM) frameworks (e.g., ITIL) and tools; experience participating in or presenting to a Change Advisory Board (CAB).

Disaster Recovery and Business Continuity: Experience developing and maintaining disaster recovery plans and business continuity strategies for IT environments.

Security Awareness Training: Experience developing and delivering security awareness training programs to diverse end-user audiences.

Accessibility Standards: Familiarity with web accessibility standards (e.g., WCAG 2.1) and their application to university web systems and applications.

Cloud and Hybrid Environments: Familiarity with cloud-based infrastructure platforms (e.g., Azure, AWS, or Google Cloud) and associated security controls in hybrid on-premises/cloud environments.

Point-of-Sale and Transaction Systems: Experience supporting point-of-sale systems, financial transaction processing systems, or university card systems (e.g., one-card systems) in a PCI-compliant environment.

Advanced Degree: Master’s degree in Cybersecurity, Computer Science, Information Technology, or a closely related field.

Special Physical/Mental Requirements

Ability to frequently travel to the UNC-Chapel Hill campus and the Town of Chapel Hill, as required for onsite work UNC data centers, various buildings for controls related work, transport of equipment which requires a valid North Carolina Driver’s License.

Ability to move equipment weighing up to 50 pounds, manipulating hand tools such as screw drivers, power drills and cutting equipment, and performing tasks on ladders or enclosed spaces, with or without reasonable accommodation. Maintenance of equipment requires strong motor skills and physical mobility.

Ability to adhere to safety requirements by wearing appropriate personal protective equipment such as safety glasses, hard hats, full-length pants, and closed-toe shoes.

Ability to recognize colors and shapes. Ability to perform work duties within various service call locations including but not limited to construction or renovation zones, hospital premises, chemical and radiation storage facilities, warehouse storage zones, and high-traffic parking areas.

Ability to support emergency situations and provide support after-hours and weekends. Occasional outdoor work or travel in adverse weather conditions may be necessary due to the location and criticality of certain equipment.

Demonstrated ability to identify and avoid hazards that may lead to injury, whether physical, electrical, chemical, biological, or otherwise.

Campus Security Authority Responsibilities

Not Applicable.

Organization

The nation’s first public university is at the heart of what’s next, preparing a diverse student body to become creators, explorers, innovators and leaders in North Carolina and throughout the world. Carolina’s nationally recognized, innovative teaching, campus-wide spirit of inquiry and dedication to public service continue the legacy that began in 1795 when the University first opened its doors to students.

Here, in one of America's most beautiful college settings, we offer exceptional careers in richly diverse fields. Come explore what UNC-Chapel Hill has to offer you.

Undergraduate Enrollment: 19,117

Graduate/Professional Enrollment: 10,894

Total Student Enrollment: 30,011

Founded: 1789, as the first state university in the United States

Type of Institution: Public, four-year

Undergraduate Admission: 15,961

Graduate/Professional Enrollment: 10,039

Total Student Enrollment: 26,000

Faculty: 3,000

Percentage of faculty who hold Ph.D.s or the highest degrees in their field: 94 percent

Faculty/student ratio: 1/14

Location: UNC is located in the heart of Chapel Hill, the best college town in America! It's a friendly town of about 40,000 in the geographical center of North Carolina. Chapel Hill is at the western point of the Research Triangle, an area of about one million people, comprised of Chapel Hill, the cities of Durham and Raleigh, and the Research Triangle Park, home of many corporate offices and scientific research centers. Carolina is about 30 miles from the state capital, Raleigh, and 20 minutes from Raleigh-Durham International Airport.

Chapel Hill's main street, Franklin Street, borders the campus and offers shops, coffee houses, cafés, movie theaters and houses of worship. The town has a historic district, museum, library, parks, malls, and many recreational facilities.

Origins of Carolina's students: 82 percent of UNC's freshmen are from North Carolina and 18 percent are from out-of-state. Our students come from 42 different states and our international students represent 37 countries.

Size of freshman class: Approximately 3,400

Class size: Barely five percent of undergraduate classes contain more than 100 students; two-thirds of undergraduate classes have fewer than 30 students. Forty-one percent have fewer than 20 students, including First Year Seminars, in which first-year students work closely with professors.

Sports and athletic programs: UNC is an NCAA Division I school with 28 varsity teams. Carolina is the proud home of the Dean Smith Center, Kenan Stadium, Carmichael Auditorium, Koury Natatorium, and many other fine athletic facilities. Students join more than 60 intramural and club sports, which include baseball, bowling, crew, golf, lacrosse, rock climbing, rugby, tae kwon do, and ultimate frisbee. The Student Recreation Center offers weight training, aerobics, stair machines, and all the equipment you would expect to find at a great health club! Carolina offers a newly renovated outdoor pool and indoor pools, a golf course, tennis courts, and the longest zipline in America!

Number of residence halls: Incoming undergraduates will live in one of Carolina's 29 residence halls, which are wired for Internet access and cable television. housing.unc.edu

Scholarships and financial aid: About 40 percent of UNC-Chapel Hill students receive scholarships and/or some form of financial aid. studentaid.unc.edu

Special research institutes: Institute for Research in Social Science, Institute of Outdoor Drama, Morehead Planetarium, Kenan Institute of Private Enterprise, Institute of Government, Institute of African American Research.

Career services: On-campus counseling, job fairs, résumé writing service, internships, placement services. www.unc.edu/depts/career

Technological facilities: Students find multiple uses for Carolina's state-of-the-art technological resources. They can access Carolina's computer services through Academic Technology and Networks, which manages academic computing, e-mail, microcomputing labs, interactive media presentation, video and classroom support, and a help desk. The MetaLab oversees the development of SunSITE, one of the world's busiest digital library and electronic publishing projects.

Students may open e-mail accounts, and many use campus computer resources to construct personal Web pages. Students in residence halls have hardwired network connections to the Internet and cable television in their rooms. At the ATN Training center, students may take classes on software packages and utilities. Computer labs are available for student use all over campus.

Carolina Computing Initiative: Beginning with the freshman class of 2000, undergraduates must purchase laptop computers. The University has arranged for IBM to offer computers at excellent prices. Students, faculty, and staff will enjoy cost savings, higher quality compatible equipment, and better technical support through CCI. www.unc.edu/cci

The Study Abroad program allows students to live and learn in Europe, the Middle East, Asia and the Pacific Rim, Africa, and the Americas. www.unc.edu/depts/abroad

The Honors Program offers special seminars, research programs, and the chance to design your own independent studies. www.unc.edu/depts/honors

Carolina students spend time in public service through student organizations, the Campus Y, the Carolina Center for Public Service, and courses that incorporate community service.

UNC's chapter of Phi Beta Kappa, a national collegiate honor society, is the oldest in North Carolina, dating from 1904. There are many other honorary societies at Carolina.

UNC offers ROTC programs in all branches of national military service.

Through the First Year Seminars program, first year students will understand what it means to study at a premier research university. They will learn from faculty members and share in their research in seminars of no more than 20 students.

Life outside the classroom: More than 370 clubs, teams, and student organizations offer something for everyone! You can choose from among musical and dramatic performing groups, publications, ethnic and religious clubs, the Campus Y and other service organizations, fraternities and sororities, and pre- professional organizations. Whatever your interests, you will find others at Carolina who share them! www.unc.edu/depts/union/student/listintr.htm