Data Security Analyst Senior

A cover letter is required for consideration for this position and should be attached as the first page of your resume. The cover letter should specifically address your interest in the position and outline particular skills and experience that directly relate to this position.

We are seeking a Data Security Analyst to join Computing and Multimedia Technologies (CMT) at the Survey Research Center (SRC) of the Institute for Social Research (ISR). CMT provides an opportunity to work in a collaborative team with the mission of providing excellent customer service in support of social science research and data collection.

The Data Security Analyst monitors, evaluates, and maintains systems and procedures to protect the SRC and ISR information systems, networks, and data. 

They will report to the Director of CMT.

This position will require access to federal project data and systems, some of which are subject to security clearance and training requirements. The Data Security Analyst may be asked to demonstrate information security knowledge in the above areas by successfully completing a security certification.  Candidates must agree to submit to SRC-funded background and security checks and be able to obtain security clearance (up to federal level 5) within 6 (six) months of hire. Please be advised that current federal security clearance requirements limit level 5 clearance to U.S. citizens.

Research and document NIST, CJIS, and other information security standards as part of project compliance and certification processes.  Review audit results and implement changes to procedures and technical systems to ensure requirements are successfully met.

Work with technical staff to implement information security plans, processes, and procedures.  Act as a liaison to U-M Information Assurance and greater U-M security community.

Collaborate with stakeholders to identify security issues and possible solutions. Define new security processes in consultation with research project staff. Communicate status updates with technical staff, project staff, and faculty regarding security projects, tasks, and process changes.

Perform systems and website vulnerability scanning and assist technical staff with vulnerability remediation and other relevant security procedures. Monitor, evaluate, and audit systems and procedures to ensure that information systems are in compliance with the applicable security standards.

Identify, evaluate, and implement information security tools and processes which support compliance with required information assurance standards and improve organizational data security. 

Provide guidance and training to project staff and operations technical staff to ensure that users are prepared for and understand security procedures and standards. 

Perform security incident handing procedures in the identification, containment, and remediation of incidents. Consult with faculty and staff to recommend corrective actions to mitigate future data security breaches.

Bachelor's degree in Computer Science, Information Technology, or an equivalent combination of education, certifications and experience is required. 

5 years of experience securing electronic information technology, network environments, and computer systems in a Microsoft Windows environment.

Experience with Microsoft Active Directory and Group Policy.

Experience documenting systems and procedures to support regulatory compliance requirements.

Knowledge of security incident handling practices and experience assisting technical staff with incident handling.

Demonstrated knowledge of information security concepts, procedures and practices.

Demonstrated knowledge of networking protocols and an understanding of security related technologies including encryption, VPN, Firewalls, etc.

Experience with desktop computer support or server administration.

Experience implementing and supporting firewalls and network security devices.

Experience securing systems in a commercial cloud environment.

Experience with website vulnerability scanning and remediation.

Security-focused certifications such as SANS, CISSP, or similar.

Monday - Friday, 8am to 5pm

The Institute for Social Research (ISR) at the University of Michigan seeks to recruit and retain a diverse workforce as a reflection of our commitment to serve the diverse people of Michigan, to maintain the excellence of the university, and to ground our research in varied disciplines, perspectives, and ways of knowing and learning. 

Benefits at the University of Michigan

In addition to a career filled with purpose and opportunity, The University of Michigan offers a comprehensive benefits package to help you stay well, protect yourself and any eligible family members and plan for a secure future. Benefits include:

• Generous time off 
• A retirement plan that provides two-for-one matching contributions with immediate vesting upon meeting eligibility requirements 
• Many choices for comprehensive health insurance
• Life insurance
• Long-term disability coverage
• Flexible spending accounts for healthcare and dependent care expenses

The University of Michigan conducts background checks on all job candidates upon acceptance of a contingent offer and may use a third party administrator to conduct background checks. Background checks are performed in compliance with the Fair Credit Reporting Act.

Institute for Social Research job openings are posted for a minimum of fourteen (14) calendar days. This opening may be removed from posting boards and filled any time after the minimum posting period has ended. 

The University of Michigan is an equal opportunity/affirmative action employer.