IT Security - Journey

Description

Columbia Basin College ('CBC' or the 'College') seeks a Cyber Security / IT Security-Journey who will report directly to the Assistant Director of Infrastructure. This position will be responsible for leading the development and enhancements of cyber security processes, as well as advanced monitoring, analysis and assessment of potential security threats and risks, and execution of plans to deal with security related activities. This position will be expected to have a strong expertise in multiple information security and security control concepts. This position assists in the protection of and reduction of cyber risk in the organization. This position reports to the Interim Assistant Director for IT Infrastructure.

This position is open until filled. First consideration will be given to applicants whose complete application has been received by June 19, 2023 @ 11:59 PM Pacific Time.

If you have questions or need assistance during the application or search process, please contact the recruiter for this position, Denise Cook at dcook@columbiabasin.edu or (509) 542-4407.

Primary Responsibilities

• Possess advanced skills and specialized support in multiple security or compliance tools/technologies and areas of cyber/information security support;
• Handle advanced-level tasks and processing of requests for Cybersecurity practices; provide documentation of a mature Cybersecurity program for accreditation or compliance concerns;
• Analyze and assess potential security risks, executing plans to deal with security related activities based on best practice methodology;
• Develop technical and operational documentation for standards, processes and procedures; develop a security evaluation plan and test procedures to assess physical, technical, and administrative safeguards and controls as appropriate;
• Monitor and audit systems for abnormal activity, and executing corrective or notification actions based on established procedures; collaborate with Network Engineer to audit and validate firewall rules to ensure compliance with security best practices;
• Provide a methodology to identify, select and/or recommend additional security practices which may be implemented with minimal capital investment and/or opportunity cost and assess applicable security solutions and technologies needed to secure the environment;
• Provide security-engineering services to new technology projects on a project-by-project basis; plan for and recommend security controls throughout the system’s life cycle;
• Monitor access and use of systems and facilities based on approved policies;
• Investigate Information Security incidents to determine chain of events, the players involved, and the impact to the organization;
• Web content filtering solution management and reporting;
• Periodically test, evaluate, assess, and certify security measures based on established guidelines of known and reasonably anticipated threats;
• Perform random security audits as requested, produce actionable threat intelligence, analyze, advise and report results as needed;
• Provide recurring End User training content on safe computing practices and develop processes for sharing information regarding common vulnerabilities; administer security training to small and large groups;
• Periodically conduct and evaluate risk assessments either independently or with support of a third-party vendor; assist with development of and recommendations for risk mitigation plans and/or programs;
• Define and recommend Information Security requirements for new applications; assess security controls of new applications to establish compliance level and appropriate configuration;
• Attend Cybersecurity forums as assigned as an entity representative;
• Ensure all security standards are reviewed yearly and deficiencies are remediated; conduct a comprehensive independent IT security audit once every three (3) years per state standards;
• Ensure compliance with the latest Washington State Office of the Chief Information Officer (OCIO), State Board of Community & Technical Colleges Information Technology Division (SBCTC-ITD) and other applicable security standards (i.e., FERPA, HIPAA, PCI, etc.), document and update security practices as necessary; and
• Perform other related duties as assigned.

Required Qualifications

• Bachelor’s degree in an IT related field from an institutionally accredited college or university; and
• Two (2) years of work experience in IT Security and Infrastructure support;

OR

• Associate’s degree or equivalent education from an institutionally accredited college or university; and
• Four (4) years of experience in Cybersecurity/IT security.

AND

• Possession of a valid U.S. driver's license or ability to obtain one before date of hire;
• Experience within or across information security vendor technologies with advanced level knowledge in one or more security vendor technologies; and
• Advanced knowledge of information security/cyber security practices, threats and controls.

Skills & Abilities

Analytical Skills : Synthesize complex or diverse information; collect and research data; use intuition and experience to complement data; design work flows and procedures;

Computer Skills : Maintain a high level of proficiency and accuracy in all duties.

Problem Solving Skills : Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions; work well in group problem solving situations; use reason even when dealing with emotional topics;

Technical Skills : Assess own strengths and weaknesses; pursue training and development opportunities; strive to continuously build knowledge and skills; share expertise with others;

Customer Service Skills : Manage difficult or emotional customer situations; respond promptly to customer needs; solicit customer feedback to improve service; respond to requests for service and assistance; meet commitments;

Oral Communication : Ability to speak clearly and persuasively in positive or negative situations; listen and get clarification; respond well to questions; demonstrate group presentation skills; participate in meetings;

Written Communication : Write clearly and informatively; edit work for spelling and grammar; vary writing style to meet needs; present numerical data effectively; able to read and interpret written information.

TERMS OF EMPLOYMENT:

This position is a full-time, overtime exempt, classified staff position. The typical work hours for this position are Monday through Thursday from 7:00 a.m. to 4:30 p.m. and Friday from 7:00 a.m. to 12:00 p.m.; however, must be available to work a flexible schedule when prior notice is given by the College. This position is available immediately.

PROCESS NOTE:

Prior to a new hire, a background check including criminal record history will be conducted. Information from the background check will not necessarily preclude employment but will be considered in determining the applicant's suitability and competence to perform in the position.

Additionally, pursuant to RCW 28B.112.080, applicants must declare whether they are the subject of any substantiated findings of sexual misconduct in any current or former employment or are currently being investigated for, or have left a position during an investigation into, a violation of any sexual misconduct policy at the applicant’s current or past employer. By law, post-secondary education institutions cannot hire an applicant who refuses to declare the existence or non-existence of an investigation or findings subject to this statute.

**Please note that selected interview candidates will be subject to supplemental testing that will measure skills and abilities related to this position (e.g., Communication, IT Systems and Cyber Security, Analytical Skills, MS Office Simulation [Excel, PowerPoint, Outlook, and Word], Customer Service, etc.).

CONDITIONS OF EMPLOYMENT:
In the interest of providing a healthy, safe and secure educational and work environment and in order to meet the requirements of federal legislation, it is the policy of Columbia Basin College to maintain an alcohol and drug-free workplace for our employees and students.

If you are hired, you will need to provide proof of identity and documentation of U.S. citizenship or appropriate authorization to work in this position as required by the Immigration Reform Control Act of 1986.

Columbia Basin College operates under an approved affirmative action plan and encourages applications from persons of color, women, veterans and persons of disability. The Human Resources Office is accessible to those with disabilities. If you need accommodation in application or employment, contact the Human Resources Office at (509) 542-4740.

OTHER JOB ELEMENTS:
The physical demands and work environment characteristics described below are representative of those that must be met and may be encountered by an incumbent when performing the essential functions of the position. Reasonable accommodations may be made to enable individuals with qualified disabilities to perform the essential functions.

PHYSICAL DEMANDS:

While performing the duties of this position, the employee is frequently required to sit, stand, bend, kneel, stoop, communicate, reach, and manipulate objects. The position requires mobility, including traveling between buildings on campus. Duties may involve moving materials weighing up to 30 pounds on a regular basis such as papers, files, boxes, equipment, computers, etc., and rarely requires moving materials weighing over 30 pounds. Manual dexterity and coordination are required while operating equipment such as computer keyboard, monitor, printer, and standard office equipment.

WORKING CONDITIONS:

Work environment includes classroom, lab, office, or other setting as appropriate. The noise level in the work area is typical of similar environments with personal interruptions and background noises. May require travel to meetings outside of the local area.

UNION CLAUSE:

This is a bargaining unit position represented by the Washington Public Employees Association (WPEA). Internal promotional, transfer and voluntary demotion applicants who have skills and abilities to perform the duties of the position will be considered prior to consideration of other applicants.