Job Description

Duties and Responsibilities:

• Prepare information security operations reviews of on-premises and cloud-based IT systems and services to ensure alignment with university policies and compliance regulations.
• Perform annual reviews of existing systems to ensure continued information security compliance.
• Analyze SOC 2 or other independent security audit reports that attest to a vendor’s security policies, procedures, and controls.
• Provide assistance with IT’s Third-Party Vendor Management Program by serving as a member of the Technology Review Board.
• Educate and provide guidance to key partners related to JMU’s information technology risk management requirements.
• Assist with the administration of IT’s security awareness and compliance training program.
• Ensure information technology compliance records are organized and complete in accordance with applicable regulations, policies, standards, and best practices.
• Demonstrate honesty, integrity, and confidentiality in the handling of university and vendor data.



Qualifications:

Required Qualifications:
• Demonstrated knowledge or experience in computer science, information technology, technical writing, business administration, or related field.
• Experience with information technology vendor risk assessment or vendor compliance.
• Strong security awareness and experience interpreting technical information, especially related to information technology best practices.
• Excellent writing skills, with the ability to create clear requirements, specifications, and documentation.
• Ability to effectively communicate, verbally and in writing, complex, technical information to both technical and non-technical audiences.
• Exceptional organization, time management, and prioritization skills.
• Ability to work independently with limited supervision as well as in teams.
• Detail-oriented and able to work with a high degree of accuracy.
• Proficient with Microsoft Excel, Word, SharePoint, and Teams.

Additional Considerations:
• Familiarity with requirements related to information technology regulations and standards including GLBA, PCI, ISO 27001 and 27002, HIPAA, HITECH, GDPR, Title II, AI governance, etc.
• Experience analyzing SOC 2 or other independent security audit reports that attest to a vendor’s security policies, procedures, and controls.
• Experience with information technology policies and procedures.
• Experience with language and terms used in contracts, licenses, and other legal documents related to information technology.
• Experience with supporting security awareness and other compliance training programs.



Additional Posting Information:





Conditions of Employment:

Employment is contingent upon the successful completion of a criminal background check.

E-Verify Notice: After accepting employment, new hires are required to complete an I-9 form and present documentation of their identity and eligibility to work in the United States. James Madison University uses the E-Verify system to confirm identity and work authorization.