Ensures the implementation, maintenance and operation of information security solutions are in order to protect UICA assets. Responsible for the development and enhancement of operational tools and techniques as well as security processes, standards, and policies, with primary emphasis on the technical side. Partners with subject matter experts when available to implement tools and techniques.

• Position allows for telecommuting/work from home (up to 5 days per week depending upon business need and leader approval). Candidate must be within driving distance of office located in Iowa City, IA.

• Works with IT leadership to develop strategy for information security and recommends security enhancements
• Plans and ensures implementation of strategic security measures to protect computer systems, networks, and data
• Monitors systems and networks for security breaches and investigates violations when they occur
• Stays up-to-date on the latest intelligence and attack vectors to anticipate security breaches
• Researches new technologies that will effectively protect the network and help prevent data loss and service interruptions
• Performs risk/vulnerability assessments on critical business systems
• Assists in developing security program by developing standards, policies, and procedures; coordinates with IT leadership to recommend improvements
• Ensures data is safeguarded by creating plans that require regular backups on a critical data and systems
• Develops security awareness across the organization by working with subject matter experts to provide orientation, educational programs, and security-related communication
• Participates in review and planning of security architecture design, continuous development of security incident response process, and IT security risk assessments
• Assists in maintaining PCI compliance

Education & Experience: Bachelor’s degree in information systems or related field and 3 years of relevant experience required.

Certification: At least one of the following (or an equivalent) is preferred: CEH, CISSP, GCLD, or CompTIA Security+.