Organizational Area: Information Technology Services- Immediate Office
Location: Oakland, CA
Posting Salary: Salary commensurate with experience.
Position Summary: The Cyber Risk Coordination Center helps University of California locations and organizations in their management of information and technology risks by delivering end-to-end solutions, using proven methodologies and tools in a consistent manner. Cyber Risk Coordination Center services help both system wide locations and organizations address timely and pervasive issues such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries, with the goal of enabling ongoing, secure, and reliable operations across the enterprise.
Incumbent will have wide-ranging experience in IT cyber risk applications. Applies professional concepts to University of California system wide initiatives to resolve institution-wide cyber risk issues, up to and including the most complex, with little or no precedent where analysis of situations and data requires an in-depth evaluation of various factors. Directs the selection of methods, techniques and evaluation criteria to obtain results. Serves in a lead capacity. Considered a cyber risk technical subject matter expert at this level.
Special Conditions of Employment: Travel Travel outside of normal business hours
Other Special Conditions of Employment: Successful completion of a background check is required for this critical position.
Job Close Date:
Duty 1: Determines customer requirements for information security technical shared/common solutions, identifies technologies that address the requirements, prepares feasibility studies, solutions comparisons and cost- benefit analyses, high-level designs and implementation plans. Presents analyses to Cyber Risk Coordination Center team members, customers, executives, as necessary for validation and acceptance. Function:Information Security Solutions Identification Percent: 40
Duty 2: Develops and/or reviews detailed designs for shared/common service solution implementation as well as implementation plans. Works with technical staff at multiple locations to review solutions, identify and overcome obstacles to implementation, and carry out implementation. Develops operational procedures for shared/common services and provides training, as necessary, about the services. Responds to operational problem reports and devises solutions to those problems. Function:Information Security Solutions Implementation Percent: 20
Duty 3: Responds to and tracks incidents reported from within UC including threat detection and identification tools such as Fidelis XPS and FireEye. Assesses particulars of reported incidents, determines whether escalation protocols are being followed properly, determines whether additional resources may be useful/desired, and reports through appropriate UC-internal channels to provide situational awareness. As necessary, marshals forensics and breach response resources within and external to UC in support of a location's incident response efforts. Monitors external information sources for indications of elevated risk to UC information resources. Takes in and tracks reports of information security issues from sources external to UC and directs reports to appropriate UC location staff for assessment and response. Function:Incident Response and Analysis Percent: 20
Duty 4: Takes in, responds to, documents, and tracks information security technical inquiries made to the Cyber Risk Coordination Center. Prepares metrics on a variety of sources including threat detection and identification tools, alerts, and incident reports. Prepares analyses, communications and presentations on a broad set of information security topics, including awareness, Cyber Risk Coordination Center processes, shared/common services, threats, trends, and other topics of relevance to the Cyber Risk Coordination Center and its customers. Function:COE Support Percent: 20
Job Requirements Bachelor's degree in related area and/or equivalent experience/training.
Minimum of 8 years of experience as a technical analyst with at least 3-4 years in a technical security role. Minimum of 3 years of dedicated information security experience. Minimum of 3 years of practical analysis experience.
Expert interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization.
Ability to work in a highly collaborative manner in order to achieve results. Effective organization skills. Expert technical understanding of a broad range of cyber security concepts and countermeasures including workstation security, perimeter security, account management, application security, cryptography, and network security.
Expert knowledge of IT security and demonstrated skill in the design and development of diverse and complex security policies and procedures.
Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.
Demonstrated knowledge of secure hardware, software and network design techniques. Demonstrated knowledge of duties required to implement information security controls and lead information security initiatives.
In-depth knowledge of computer hardware, software and network security issues and approaches.
Expert knowledge of data encryption technologies and demonstrated experience selecting and applying appropriate data encryption technologies.
Broad knowledge of technology-related initiatives and an understanding of impact to the organization of such initiatives.
Demonstrated advanced experience in incident response and digital forensics including metrics and reporting. Demonstrated skill at analyzing and preventing security incidents of high complexity. Required
Demonstrated experience interacting with upper management on a regular basis.
Knowledge of project management practices and project lifecycle processes.
Thorough knowledge of other areas of IT and in-depth knowledge and understanding of University of California system wide processes and procedures.
About us The University of California, one of the largest and most acclaimed institutions of higher learning in the world, is dedicated to excellence in teaching, research and public service. The University of California Office of the President is the corporate headquarters to the ten campuses, five medical centers and three Department of Energy National Labs and enrolls premier students from California, the nation and the world.
The University of California is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, age or protected veteran status.
Copyright 2017 Jobelephant.com Inc. All rights reserved.
About University of California Office of the President
The Office of the President is the systemwide headquarters of the University of California, managing its fiscal and business operations and supporting the academic and research missions across its campuses, labs and medical centers.