University of Tennessee Health Science Center Looking for IT Administrator III-ITS Cybersecurity Full Time

Description

Market Range: 13

Hiring Range: $5,515.71 – $7,527.24/Monthly 

JOB SUMMARY/ESSENTIAL JOB FUNCTIONS: The IT Administrator 3 is responsible for leading the day-to-day ITS compliance and ITS risk management functions. This position serves as a critical resource for staff and leaders regarding information security policy implementation, interpretation, and compliance. This position assesses and prioritizes information security and cybersecurity risk across the organization, facilitates compliance with regulatory requirements and information security policies, and develops and reports on information security metrics. 

DUTIES AND RESPONSIBILITIES:               

1. Identifies, analyzes, evaluates, and documents information security risks through security risk assessments of planned or existing systems.
2. Recommends controls to mitigate identified security risks and communicates risk findings and recommendations that are clear and actionable to the business stakeholders.
3. Documents technical, administrative, and physical controls to ensure UTHSC demonstrates compliance with requirements and intent of regulatory and compliance obligations.
4. Facilitates the remediation of control gaps and escalates critical issues to leadership.
5. Manages an exception review and approval process and assures exceptions are documented and periodically reviewed.
6. Interacts with external vendors/suppliers to perform third-party supplier risk assessment to ensure supply chain risk is managed throughout the supplier’s lifecycle.
7. Assists with review of information security sections within supplier contracts, identifies gaps, and recommends security and data privacy content to close gaps.
8. Manages and maintains the ITS risk reporting process.
9. Assists with the evaluation of the effectiveness of the information security program through the development, management, and maintenance of reporting metrics, dashboards, and evidence artifacts.
10. Research emerging technologies and/or threats and provide training.
11. Performs other related duties as assigned.

Qualifications

MINIMUM REQUIREMENTS:  

EDUCATION: Bachelor’s Degree in Cybersecurity/Technology, Business, Healthcare, or a related field. (TRANSCRIPT REQUIRED)

EXPERIENCE: Four (4) years of experience with risk assessments, security policy writing, enterprise technology, or other GRC-related activities; OR Associate’s Degree, five (5) years of related work experience; OR a combination of related education and work experience to equal twelve (12) years.

 

KNOWLEDGE, SKILLS, AND ABILITIES:

• Ability to exercise a high level of judgment, prudence, discretion, and integrity.
• Knowledge of risk management and compliance concepts.
• Knowledge of industry and government regulations (HIPAA, FERPA, PCI-DSS, etc.)
• Ability to analyze data and information with a detailed understanding of regulatory requirements as well as security frameworks and risk management.
• Knowledge of security frameworks (NIST CSF or CIS CSC 18).
• Strong problem-solving skills with the ability to understand and manage the implications and impacts of technical issues and processes in the context of information security and risk management.
• Excellent verbal and written communication skills.
• Ability to work with people from different disciplines with varying degrees of technical experience.
• Ability to develop technical standards, procedures, and guidelines.

WORK SCHEDULE:  This position may be occasionally required to work evenings and weekends. May require occasional overnight travel.

Job: Information Technology Professional

Primary Location: US-Tennessee-Memphis

Organization: Information Technology Services

Campus/Institute: Memphis

Schedule: Full-time

All qualified applicants will receive equal consideration for employment and admissions without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity, age, physical or mental disability, or covered veteran status.

Eligibility and other terms and conditions of employment benefits at The University of Tennessee are governed by laws and regulations of the State of Tennessee, and this non-discrimination statement is intended to be consistent with those laws and regulations.

In accordance with the requirements of Title VI of the Civil Rights Act of 1964, Title IX of the Education Amendments of 1972, Section 504 of the Rehabilitation Act of 1973, and the Americans with Disabilities Act of 1990, The University of Tennessee affirmatively states that it does not discriminate on the basis of race, sex, or disability in its education programs and activities, and this policy extends to employment by the University.

Inquiries and charges of violation of Title VI (race, color, national origin), Title IX (sex), Section 504 (disability), ADA (disability), Age Discrimination in Employment Act (age), sexual orientation, or veteran status should be directed to the Office of Equity and Diversity (OED), 910 Madison Avenue, Suite 826, Memphis, Tennessee 38163, telephone at 901-448-2133 or 901-448-7382 (V/TTY available). Requests for accommodation of a disability should be directed to the ADA Coordinator at the Office of Equity and Diversity.