Senior Security Analyst - IS-Security

University of Texas Medical Branch (UTMB)•Galveston, TX

About The Position

The Senior Security Analyst serves as a key leader within the organization's information security program, safeguarding sensitive clinical, academic, and administrative data across a complex healthcare, educational, and research environment. This role provides advanced technical expertise, strategic guidance, and hands-on support to strengthen the confidentiality, integrity, and availability of institutional information systems and resources.

Requirements

Bachelor's degree and three (3) years related Information Security or Information Technology experience. An equivalent combination of education and experience relevant to the role may be considered for this position.
Industry recognized cyber-security certification (CySA+, CEH, SSCP).
Expertise in network security, endpoint protection, identity and access management, and cloud security models.
Familiarity with threat intelligence, attack vectors, malware behavior, and incident response methodologies.
Knowledge of security architecture, secure system design, and risk management practices.
Awareness of emerging cybersecurity trends, technologies, and threat landscapes.
Ability to develop and implement security standards, procedures, and technical controls.
Effective communication skills for translating complex technical issues into clear guidance for non-technical stakeholders.

Nice To Haves

Five (5) years of related Information Security or Information Technology experience.
Multiple industry recognized cyber-security certifications (CySA+, CEH, SSCP).

Responsibilities

Lead and advise on information security initiatives in partnership with the Lead Security Analyst and Chief Information Security Officer, ensuring alignment with organizational risk, compliance, and operational priorities across healthcare and academic environments.
Drive the implementation and successful execution of approved security projects, providing technical leadership, project oversight, and cross-departmental coordination.
Serve as a subject matter expert on data confidentiality, system integrity, system reliability, and secure recovery practices, ensuring adherence to regulatory requirements such as HIPAA, FERPA, and other applicable standards.
Lead investigations into suspected or confirmed security incidents, including unauthorized access, data modification, disclosure, or destruction, and provide detailed analysis and reporting to leadership.
Oversee the evaluation, selection, configuration, and lifecycle management of security technologies, including software, utilities, and hardware. Direct remediation efforts for identified vulnerabilities and ensure timely risk reduction.
Maintain and enhance the organization’s security architecture and design, ensuring scalability, resilience, and alignment with industry best practices and emerging threats.
Develop, refine, and enforce technical security standards, frameworks, and incident response procedures to support organizational policies and regulatory obligations.
Conduct advanced analysis to identify and resolve security vulnerabilities, operational risks, and audit findings across applications, infrastructure, and legacy systems. Produce clear documentation and recommendations for corrective action.
Function as a Subject Matter Expert for security functions under assigned job responsibilities.
Direct and support investigations involving potential misuse, theft of information resources, or violations of institutional security and privacy policies, collaborating with legal, HR, compliance, and law enforcement as appropriate.
Monitor enterprise systems and networks for indicators of compromise, leveraging advanced detection tools and threat intelligence to rapidly respond to and contain security incidents.
Evaluate, implement, and optimize security controls to safeguard information assets, ensuring alignment with risk management frameworks and compliance requirements, and best practices.
Serve as a senior team member and mentor, providing guidance, knowledge sharing, and technical leadership to junior analysts and cross-functional partners.
Participates as a team member.
Adheres to internal controls and reporting structure.
Performs related duties as required.