Information Security Administrator

• →Administers, monitors, and maintains information security technologies, including endpoint protection, vulnerability management, security monitoring, encryption, multi-factor authentication, and identity and access management solutions. 
• →Protects systems and applications that store, process, or transmit sensitive and regulated data, including HIPAA, PII, FERPA, and other confidential information. 
• →Implements and maintains identity and access management controls, role-based access models, and least-privilege access practices. 
• →Monitors security alerts, investigates potential threats, and coordinates remediation activities to mitigate organizational risk. 
• →Conducts security assessments, vulnerability reviews, and configuration audits to identify and address security weaknesses. 
• →Analyzes security incidents, determines root causes, and supports containment, recovery, and corrective action efforts. 
• →Supports the development, implementation, and maintenance of information security policies, standards, procedures, and best practices. 
• →Participates in risk assessments, control evaluations, and remediation planning to strengthen the organization's security posture. 
• →Assists with compliance initiatives, audits, regulatory reviews, and security assessments aligned with applicable laws, regulations, and industry frameworks. 
• →Maintains security documentation, reports, and records to support compliance, audit readiness, and operational effectiveness. 
• →Supports business continuity, disaster recovery, and incident response planning and testing activities. 
• →Collaborates with IT teams, system owners, and business stakeholders to implement security controls and mitigate risk. 
• →Provides guidance on secure system design, implementation, configuration, and change management practices. 
• →Leads teams to conduct in-depth information technology risk assessments; makes recommendations and designs improvements to IT security procedures.
• →Guides communications with users to understand their security needs and supports the implementation of procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• →Performs other related work as needed.

• Security+ certification or an equivalent industry-recognized security certification.
• Advanced certifications.  

• Bachelor's degree.
• Degree preferably in information technology, computer science, cybersecurity, or a related field.

• Hands-on information security experience in an enterprise environment.
• Background analyzing security events, identifying root causes, and recommending corrective actions.

• Proficient at securing systems containing sensitive or regulated data, including HIPAA, PII, FERPA, or similar data classifications.
• Working knowledge of cybersecurity principles, access control methodologies, identity management, and security operations practices.

• Strong analytical, troubleshooting, and problem-solving skills strongly preferred.
• Effective written, verbal, and interpersonal communication skills.

• This position is currently expected to work a minimum three days per week in the office.

• Resume/CV (required)
• Cover Letter (required)

​
FLSA Status

​
Pay Range

The included pay rate or range represents the University’s good faith estimate of the possible compensation offer for this role at the time of posting.

The University of Chicago is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender, gender identity, or expression, national or ethnic origin, shared ancestry, age, status as an individual with a disability, military or veteran status, genetic information, or other protected classes under the law. For additional information please see the University's Notice of Nondiscrimination.

Job seekers in need of a reasonable accommodation to complete the application process should call 773-702-5800 or submit a request via Applicant Inquiry Form.

All offers of employment are contingent upon a background check that includes a review of conviction history.  A conviction does not automatically preclude University employment.  Rather, the University considers conviction information on a case-by-case basis and assesses the nature of the offense, the circumstances surrounding it, the proximity in time of the conviction, and its relevance to the position.

The University of Chicago's Annual Security & Fire Safety Report (Report) provides information about University offices and programs that provide safety support, crime and fire statistics, emergency response and communications plans, and other policies and information. The Report can be accessed online at: http://securityreport.uchicago.edu. Paper copies of the Report are available, upon request, from the University of Chicago Police Department, 850 E. 61st Street, Chicago, IL 60637.