Information Security Analyst

Department: Information Security Office
Salary/Grade: ITS/79

Job Summary:

The Information Security Analyst maintains systems to protect data from unauthorized users, identifies, reports, and resolves security violations. Designs, develops, tests, and deploys security for applications or systems. Collaborates with users, to obtain and implement user security requirements, including row-level security. Ensures compliance with all security associated NU, state, and federal rules and regulations. Works closely with NU, individual school and/or department IT to ensure security measures are implemented and communicated effectively.

Specific Responsibilities:

• Administers all information security security aspects for users.
• Designs and maintains security items such as endpoint detection and response, security event incident management, information security orchestration and automation
• Analyzes logs and other system data to actively investigate and mitigate cybersecurity threats to Northwestern.
• Participates in projects and assists in the execution of project plans to help ensure compliance with security policy and standards.
• May be required to develop, execute and coordinate small scale security projects.
• Interacts daily with user community to understand their security needs
• Provides assistance in remediation of security related issues.
• Prepares and executives security risk assessments, analysis and remediation.
• Assists in the resolution of audit findings through analysis, problem determination and development of cost-effective solutions.
• Maintains records, forms and documentation.
• Assists in the preparation of training materials and communications.
• Conducts training sessions; shares educational information with users.
• Reviews requests for access and authorizes appropriate levels of security based on user needs, guidelines, and policy.
• Assists in Administration of Information Security practice through development, implementation, and enforcement of information security policy and standards.

Miscellaneous

Performs other duties as assigned.

Minimum Qualifications:

• Successful completion of a full 4-year course of study in an accredited college or university leading to a bachelor's or higher degree in a major such as computer science, information technology, or related; OR appropriate combination of education and experience.
• 2 years systems security or other relevant experience required.
• 5 years practical experience with technology and/or security environment; technical background, with an understanding of concepts of confidentiality, availability, and integrity; disaster recovery, business continuity, user authentication and authorization

Experience in the systems/technologies below:

• Firewalls (such as Palo Alto)
• SIEM systems (such as Splunk Enterprise Security or Crowdstrike NG-SIEM)
• Email Security (such as Proofpoint)
• XDR/EDR Software (such as Crowdstrike)
• Vulnerability Management Software (such as Tenable or Crowdstrike)
• Demonstrated ability to think critically and problem-solve
• Basic understanding of firewall theory and network security
• Ability to weight business needs against security concerns and articulate issues to the user community

Preferred Qualifications:

• Security or technology industry certification (e.g. CISSP, SANS, CEH, Microsoft or similar)
• Ability to deconstruct electronic mail, metadata, network flows and log data from multiple sources.
• Proven technical expertise in networking, server client technology and operating systems.
• Ability to provide support to projects regarding information security practices.
• Analytical skills with ability to relate to technical and non-technical personnel.
• Ability to develop and implement policy and standards.
• Experience in a higher education environment.

Target hiring range for this position will be between $80,297-$90,334 per year. Offered salary will be determined by the applicant's education, experience, knowledge, skills and abilities, as well as internal equity and alignment with market data

Benefits:
At Northwestern, we are proud to provide meaningful, competitive, high-quality health care plans, retirement benefits, tuition discounts and more! Visit us at https://www.northwestern.edu/hr/benefits/index.html to learn more.

Work-Life and Wellness:
Northwestern offers comprehensive programs and services to help you and your family navigate life's challenges and opportunities, and adopt and maintain healthy lifestyles.
We support flexible work arrangements where possible and programs to help you locate and pay for quality, affordable childcare and senior/adult care. Visit us at https://www.northwestern.edu/hr/benefits/work-life/index.html to learn more.

Professional Growth & Development:
Northwestern supports employee career development in all circumstances whether your workspace is on campus or at home. If you're interested in developing your professional potential or continuing your formal education, we offer a variety of tools and resources. Visit us at https://www.northwestern.edu/hr/learning/index.html to learn more.

Northwestern University is an Equal Opportunity Employer and does not discriminate on the basis of protected characteristics, including disability and veteran status. View Northwestern's non-discrimination statement. Job applicants who wish to request an accommodation in the application or hiring process should contact the Office of Civil Rights and Title IX Compliance. View additional information on the accommodations process.