Information Security Analyst Senior

Department: IT Admn Sys Ofc Portfolio Mgmt
Salary/Grade: ITS/82

Job Summary:

Completes procedures necessary to ensure the safety of information assets and to protect systems from intentional or inadvertent access, modification, disclosure or destruction. Collaborates with users to understand their security needs, providing assistance, and implementing practices and procedures to mitigate risks. Ensures that users understand security policies and adherence to established guidelines. Designs, develops, tests, and deploys security solutions for applications and systems. Oversees domain access control, ensuring appropriate permissions and safeguards are in place. Ensures compliance with NIST 800-171, GLBA, and other federal and institutional compliance requirements. Partners with IT teams at NU, individual schools, and departments to implement and effectively communicate security measures. Develops and maintains documentation to support audit processes and regulatory compliance activities, including tracking remediation efforts and reporting findings to leadership.

Specific Responsibilities:

Strategic Planning

• Participates in projects and assists in the execution of project plans to help ensure compliance with security policy and standards.
• Collaborates with users to understand their security needs and provides assistance in remediation of security-related issues.

Administration

• Partners with users to review and assess security architecture and recommends changes and enhancements to improve effectiveness and efficiency.
• Monitors and enforces security policy, practice and procedures.
• Creates training materials associated with security policy, practice, and procedures and instructs junior staff and users.
• Gathers and organizes statistics as directed and for use by management.

Development

• Administers all security aspects for users.
• Designs and maintains security items such as roles, permission lists, query and report access, component interfaces, and batch process groups.

Performance

• Participates in or conducts investigations, including those requiring the application of forensic practice.
• Prepares and executes security assessments, analysis and remediation.
• Assists in the resolution of audit findings through analysis, problem determination and development of cost effective solutions.
• Provides assistance in the resolution of security incidents and prepares activity, progress and management reports as required.

Supervises

• Provides work direction and/or supervises staff such as team members, subordinates, contractors, vendors, students, etc.
• Recommends staff hires/terminations.
• Coaches and mentors staff.
• Manages projects ensuring timelines and deliverables are met and meet expectations.

Miscellaneous

• Other duties as assigned.

Minimum Qualifications:

• Successful completion of a full 4-year course of study in an accredited college or university leading to a bachelor's or higher degree in a major such as computer science, information technology, or related; OR appropriate combination of education and experience.
• 4 years systems security or other relevant experience required.
• Please see information highlighted in tables below.
• Enterprise Applications
• PeopleSoft Campus Solutions (SES)
• PeopleSoft Financials/SCM (NU Financials)
• PeopleSoft HRMS (FASIS)
• Infrastructure (extends across applications)
• Information security
• Microsoft SharePoint
• Programming Languages and Frameworks
• PL/SQL
• Compliance
• FERPA
• NIST 800-171
• GLBA
• Analytical
• Critical thinking
• Judgment
• Problem solving
• Troubleshooting
• Project
• Organizational skills
• Planning

Minimum Competencies: (Skills, knowledge, and abilities.)

• PeopleSoft HCM, CS, FSM Security Administration experience in PeopleSoft 8.9 or above
• Experience with Security Design, User Profile Setup, Role & Permission List Setup, Process Security, Query Security, Row Level Security, Portal Security, Security Migrations, Definition Security, Dynamic Role Creation and Query Tree Security, Audit and Compliance
• Familiarity with appropriate federal regulations governing information security, including FERPA, NIST 800-171, and GLBA.

Benefits:
At Northwestern, we are proud to provide meaningful, competitive, high-quality health care plans, retirement benefits, tuition discounts and more! Visit us at https://www.northwestern.edu/hr/benefits/index.html to learn more.

Work-Life and Wellness:
Northwestern offers comprehensive programs and services to help you and your family navigate life's challenges and opportunities, and adopt and maintain healthy lifestyles.
We support flexible work arrangements where possible and programs to help you locate and pay for quality, affordable childcare and senior/adult care. Visit us at https://www.northwestern.edu/hr/benefits/work-life/index.html to learn more.

Professional Growth & Development:
Northwestern supports employee career development in all circumstances whether your workspace is on campus or at home. If you're interested in developing your professional potential or continuing your formal education, we offer a variety of tools and resources. Visit us at https://www.northwestern.edu/hr/learning/index.html to learn more.

Target hiring amount for this position will be between $112,000 per year. Offered salary will be determined by the applicant's education, experience, knowledge, skills and abilities, as well as internal equity and alignment with market data.

Northwestern strongly recommends COVID-19 vaccinations and boosters for people who can obtain them as a critical tool for minimizing severe illness. More information can be found on the COVID-19 and Campus Updates webpage.

The Northwestern campus sits on the traditional homelands of the people of the Council of Three Fires, the Ojibwe, Potawatomi, and Odawa as well as the Menominee, Miami and Ho-Chunk nations. We acknowledge and honor the original people of the land upon which Northwestern University stands, and the Native people who remain on this land today.

Northwestern University is an Equal Opportunity, Affirmative Action Employer of all protected classes, including veterans and individuals with disabilities. Women, racial and ethnic minorities, individuals with disabilities, and veterans are encouraged to apply. Click for information on EEO is the Law.