Information Security Analyst

Organizational Unit- University of Victoria -> VP Finance and Operations -> University Systems- Location- University of Victoria - Victoria, BC V8W 2Y2 CA (Primary) - Posting Close Date- 25 September 2024- Please note that positions will close at 4 p.m. on the closing date.- FTE- 1.0- Salary Grade- $72,242.00 - $93,951.00- Additional Posting Information- N/A- Salary posted will be pro-rated based on FTE and achieved as per the collective agreement, if applicable.- Classification- SG10- Employee Group: - PEA - Regular- # of Hires Needed- 1- Category- Information Technology- About this OpportunityUniversity Systems also plays a leadership role within the higher education ecosystem as one of the leaders in research computing. As one of five national research computing host sites, UVic is a Canadian leader for cloud computing for research. UVic also provides technical support for BCNET and CANARIE, the national research and education network, and is actively engaged in cybersecurity collaborations in BC and Canada. We exist in a complex work environment where we must effectively navigate complex, cutting edge and ever-changing technology, and information security and privacy issues and we strive to be the best information systems organization in the Canadian university system. The Information Security Office is looking for motivated individuals who want to be part of a collaborative team advancing cybersecurity culture at UVic and beyond. We are looking for people who understand the mission and purpose of the university, and who care deeply about serving our faculty, staff, students and the broader higher-education commnunity. **_*This position is eligible for a Hybrid Work Arrangement*_** **The salary range for this position is**: **Recruitment range: $72,242- $79,650** starting salary determined by the PEA Collective Agreement. **Performance range: starting salary to max of $93,951** is available through annual performance increases. **_**This position receives an annual market adjustment of $5,700**_** - Job SummaryReporting to the Associate Director, Information Security Office, the Information Security Analyst assists in the monitoring and enforcement of information security policy and standards to protect the University’s Information Resources. The Information Security Analyst supports day-to-day operations; analyzes and consults on security matters; responds to operational security issues; serves as a resource on security-related projects or projects with a security component; and leads select information security projects. The Information Security Analyst is a trusted resource, providing guidance to technical staff and staff in units within the University, as well as collaborating closely with technical staff. The Senior Information Security Analysts, Associate Director, Chief Information Security Officer, and other senior leaders provide guidance and direction on resolving complex issues. Objectives: - implements the components (such as policies, projects, etc.) that make up the information security program at the University; - provides support and analysis on information security gaps; and researches, plans, and executes additional projects to secure Information Resources; - participates in incident response and operational aspects of information security; - provides training and awareness to ensure the campus community is aware of their information security responsibilities, and promotes good information security practices; - maintains up-to-date knowledge of security and privacy legislation, regulations, advisories, alerts, and vulnerabilities pertaining to the University. - Job RequirementsThis position requires a Bachelor's degree in a technical discipline (Computer Science or Computer Engineering preferred) and 3-5 years' experience working in an enterprise networking environment, and 1-3 years’ experience in an information security-related function, An equivalent combination of education, training and experience would be considered. Essential knowledge and experience requirements include: - Good understanding of TCP/IP and related network protocols - Basic scripting/programming knowledge (e.g. shell scripts, Perl, Ruby, Python, SQL) - Broad knowledge of Windows, Mac, and Linux operating system environments - Working knowledge of and experience in the environment of information security - Experience with common open source security tools (Nessus, nmap, Wireshark, Snort, Metasploit, etc.) - Experience with security services, such as Disk Encryption, Antivirus and Endpoint Protection, Intrusion Detection/Prevention and Firewalls, Desktop Management, Security Event and Incident Management, and Data Loss Prevention, is strongly desired - Experience in securing remote-access and mobile computing environments Essential competencies include: - Demonstrate the highest standards of ethical conduct in ensuring the confidentiality, integrity, and availability of information resources - Demon