Security Awareness Analyst

Position Overview:
At the University of Minnesota, we are dedicated to changing lives through education, research, and outreach. The University Information Security department (UIS) offers an environment of trust, collaboration, and mission-focused work. We seek an individual who will be responsible for increasing the University community's knowledge of their information security responsibilities by maintaining and expanding our information security awareness and education efforts through training initiatives, metrics and governance.

Job Responsibilities:
Security Awareness and Training:

• Develop, implement, and manage a comprehensive information security awareness training program aligning with organizational policies and regulatory requirements.
• Establish and track metrics to measure the effectiveness of security awareness training initiatives, tracking of participation, identifying areas for improvement, and reporting progress to leadership
• Collaborate with HR, IT, and other departments to ensure security awareness training is integrated into employee onboarding, ongoing professional development, and offboarding processes.
• Lead security awareness and education efforts through the development or procurement of content for educational programs
• Provide consultation with University community members to improve their knowledge of information security best practices.
• Stay current with emerging cybersecurity threats, vulnerabilities, and industry best practices to enhance training content.
• Promote a strong security-conscious culture throughout the organization through ongoing communication and awareness campaigns.

Training Content Procurement, Development, and Delivery

• Work closely with Marketing & Communication, and Training teams and subject matter experts to maintain the Information Security web content.
• Manage information security awareness content within the University's learning management system (LMS).
• Create and maintain up-to-date security awareness training content that addresses current threats (e.g., phishing, social engineering, malware, ransomware) and compliance requirements (e.g., HIPAA, GDPR, PCI DSS).
• Tailor training content to various audiences and roles within the organization, considering their specific security risks and responsibilities.
• Research, evaluate, and recommend third-party security awareness training platforms, content providers, and courses; including role-based security training curricula specifically designed for various IT roles (e.g., developers, system administrators, network engineers) to address their unique security responsibilities and risks.
• Conduct regular training sessions (in-person or virtual) for new hires and existing employees, ensuring a high level of engagement and understanding.
  

Please note, this position is not eligible for H-1B or Green Card sponsorship. This position does not offer a STEM OPT training program.

Required Qualifications:

• Bachelor's degree and 2 years of relevant work experience or a comparable combination of education, training, and experience.
• Minimum of 2 years of demonstrated experience in one or more of the following:
  • Regulatory compliance
  • Risk assessment or information technology audit
  • Technical writing and documentation, including writing for a less technical audience
  • Experience with training and/or awareness program
  • Change management
• Strong analytical and problem-solving skills.
• Excellent communication (oral, written, presentation), interpersonal, and consultative skills.

Preferred Qualifications:

• Proven experience in Demonstrated experience in one or more of the following:
  • Information Security training and/or awareness program
  • Working with information security regulatory frameworks (eg. ISO 27001/27002, NIST)
  • Data analytics, dashboarding, and developing key performance indicators (KPIs) for program effectiveness reporting.
  • Designing, recommending, and/or implementing information security controls

Pay Range: $80,000 - $90,000 annually; depending on education/qualifications/experience

Time Appointment Category: 75%-100% Appointment (If job description above does not specify appointment or expected weekly hours, assume a 100% appointment.)

Position Type: Faculty and P&A Staff

Please visit the Office of Human Resources website for more information regarding benefit eligibility.

The University offers a comprehensive benefits package that includes:

• Competitive wages, paid holidays, and generous time off
• Continuous learning opportunities through professional training and degree-seeking programs supported by the Regents Tuition Benefit Program
• Low-cost medical, dental, and pharmacy plans
• Healthcare and dependent care flexible spending accounts
• University HSA contributions
• Disability and employer-paid life insurance
• Employee wellbeing program
• Excellent retirement plans with employer contribution
• Public Service Loan Forgiveness (PSLF) opportunity
• Financial counseling services
• Employee Assistance Program with eight sessions of counseling at no cost

While our salary ranges provide a framework, it is important to note that most of the time, the initial pay may not reach the maximum of the range. This approach ensures that compensation reflects the value and unique contributions of each candidate while maintaining equity within our organization. As part of our commitment to fair and equitable compensation, please be aware that the salary offered to incoming candidates will be based on their individual credentials and experience.

Applications must be submitted online. To be considered for this position, please click the Apply button and follow the instructions. You will be given the opportunity to complete an online application for the position and attach a cover letter and resume.

Additional documents may be attached after application by accessing your "My Job Applications" page and uploading documents in the "My Cover Letters and Attachments" section.

To request an accommodation during the application process, please e-mail employ@umn.edu or call (612) 624-8647.

The University recognizes and values the importance of diversity and inclusion in enriching the employment experience of its employees and in supporting the academic mission. The University is committed to attracting and retaining employees with varying identities and backgrounds.

The University of Minnesota provides equal access to and opportunity in its programs, facilities, and employment without regard to race, color, creed, religion, national origin, gender, age, marital status, disability, public assistance status, veteran status, sexual orientation, gender identity, or gender expression. To learn more about diversity at the U: http://diversity.umn.edu

Any offer of employment is contingent upon the successful completion of a background check. Our presumption is that prospective employees are eligible to work here. Criminal convictions do not automatically disqualify finalists from employment.

The University of Minnesota, Twin Cities (UMTC)

The University of Minnesota, Twin Cities (UMTC), is among the largest public research universities in the country, offering undergraduate, graduate, and professional students a multitude of opportunities for study and research. Located at the heart of one of the nation's most vibrant, diverse metropolitan communities, students on the campuses in Minneapolis and St. Paul benefit from extensive partnerships with world-renowned health centers, international corporations, government agencies, and arts, nonprofit, and public service organizations.

At the University of Minnesota, we are proud to be recognized by the Star Tribune as a Top Workplace for 2021, as well as by Forbes as Best Employers for Women and one of America's Best Employers (2015, 2018, 2019, 2023), Best Employer for Diversity (2019, 2020), Best Employer for New Grads (2018, 2019), and Best Employer by State (2019, 2022).