Information Security Analyst - IRO

University Information Technology Services (UITS) is the University of Arizona's central technology organization. UITS delivers enterprise and specialized technology services that support students, faculty, researchers, staff, and campus partners. Through innovation, strategic partnerships, and a commitment to accessibility and continuous improvement, UITS supports the evolving needs of a leading research university and the communities it serves.

UITS invites applicants for the Information Security Analyst - IRO (Information Security Analyst III) position. The Information Security Analyst will provide expertise in the Information Resource Owner role for risk management of software contracts managed by the UITS organization. This role reviews software contracts to ensure data security obligations are met before contracts are finalized and works alongside the Information Security Office (ISO) to align data governance and university policy across the software contract lifecycle.

This position is based at the Tucson campus and may be eligible for a hybrid work arrangement, subject to supervisor approval and department needs.

Visa sponsorship is not available for this position.

Outstanding U of A benefits include health, dental, and vision insurance plans; life insurance and disability programs; paid vacation, sick leave, and holidays; U of A/ASU/NAU tuition reduction for the employee and qualified family members; retirement plans; access to U of A recreation and cultural activities; and more!

The University of Arizona has been recognized for our innovative work-life programs. For more information about working at the University of Arizona and relocation services, please click here.

• Review UITS-managed software contracts for data security policy alignment.
• Provide recommendations for software owners across all departments within the University to mitigate security risks.
• Construct, design, or perform daily reviews and monitor reports and notifications relating to security attacks that the University is currently under.
• Advise and collaborate with institutional stakeholders and campus partners to align strategic initiatives to improve security controls and software.
• Work with campus partners to improve and coordinate the University's preventative measures and response processes.
• Communicate and collaborate with the Information Security Office (ISO) to ensure data security policy updates.

This job posting reflects the general nature and level of work expected of the selected candidate(s). It is not intended to be an exhaustive list of all duties and responsibilities. The institution reserves the right to amend or update this description as organizational priorities and institutional needs evolve.

• Bachelor's degree or equivalent advanced learning attained through professional level experience required.
• Minimum of five (5) years of relevant work experience, or equivalent combination of education and work experience.

• Experience working in higher education.
• Experience in information security analysis.
• Experience in technical writing.
• Experience with information security risk policies.
• Experience evaluating software contracts for data risks.
• Experience with stakeholder management.