multiple job postings at the University of South Carolina: Information Security

["VIEYRA, MARCOS" <MVIEYRA () MAILBOX SC EDU>]

Ladies and Gentlemen,

The University of South Carolina Information Security Office is looking to fill 4 new permanent staff and one temporary 
(approx. 2 years) position. If you ever wished you could practice your infosec trade in Columbia, South Carolina, with 
an energetic team that believes in having fun, regularly provides professional development opportunities, and helps the 
largest research university in the state manage information risk, now may be your chance! To review the job postings 
and submit an application, please visit https://uscjobs.sc.edu, click "search postings," and use the search feature to 
find the following requisition numbers: 005925, 005959, 005993, 005988, 006040. I will provide the job description of 
each of these positions below my signature block.

And for those of you traveling to the EDUCAUSE Security Professional's Conference next week, two of us will be in 
attendance. Feel free to look up David Wilhite and I on the program schedule and introduce yourself before or after one 
of our presentations. We would be happy to tell you more about our team, our environment, and these new opportunities.

I hope everyone has a great weekend,


--
Marcos Vieyra
Chief Information Security Officer
University of South Carolina
803.777.4685
marcos () sc edu
http://security.sc.edu


------------------------------

Title: Security Consultant
Requisition number: 005925
Job description: This is a TEMPORARY position, reporting within the UTS IT Security Office (ITSO) to the primary 
security consultant for the SecureCarolina Project. This position's primary responsibility (Security Assessment and 
Compliance Consultant) is to consult with university business and academic units identified for security and privacy 
assessment within scope of the SecureCarolina Project (customers), which may include any USC department on any campus. 
This Consultant will provide information security and privacy knowledge while coordinating the assessment and 
remediation efforts conducted by customer functional and technical staff. Office space for this position will be 
provided on Columbia campus facilities, but duties may require travel to other USC campuses as well. Additional 
responsibilities include: reporting progress of SecureCarolina Project goals to the SecureCarolina Project Manager; 
coordinating communication between ITSO technical experts and customers; and other duties as assigned. The anticipated 
term of this temporary position is 2 years, but this term may be extended to staff future SecureCarolina goals.  


Title: Information Security and Privacy Awareness Specialist
Requisition number: 005959
Job description: This position reports to the Chief Information Security Officer. The primary responsibility of the 
Information Security and Privacy Awareness Specialist is to develop, deliver, promote, and maintain, or to assist with 
the development, delivery, promotion, and maintenance of information security and privacy specific awareness 
communications, materials, or programs to the entire USC community. Examples of such awareness communications, 
materials, and programs include, but are not limited to: promoting USC's existing Information Security Program; 
maintaining the security team social media presences; ensuring content on the primary security website is current, 
relevant and appropriate; tailoring and delivering appropriate awareness material to students, faculty, staff, alumni, 
and parents; coordinating, planning, and promoting security team events and activities, such as National Cybersecurity 
Month presentations, or other information security and privacy specific news or awareness sessions; serving as the 
primary liaison between the security team and other university public relations or communication staff. Additional 
responsibilities include: gathering, preparing and assisting in the reporting of relevant information security and 
privacy metrics; providing communication quality control, technical writing, and related guidance for the entire 
security staff; other duties as assigned.


Title: IT Security Systems Architect
Requisition number: 005993
Job description: This position reports within the Information Technology (IT) Security Office. The purpose of the IT 
Security Systems Architect is to develop, operate, and maintain, or to assist with the development, operation, and 
maintenance of enterprise-wide IT security architectures, solutions and infrastructure, including but not limited to: 
data discovery and loss prevention; log aggregation; intrusion detection or prevention; multi-factor authentication; 
and to assist in the development, implementation, and maintenance of other information security and privacy goals and 
objectives.


Title: Senior Server IT Security Engineer
Requisition number: 005988
Job description: This position reports within the Information Technology (IT) Security Office. The purpose of the 
Senior Server Security Engineer is to develop, operate, and maintain, or to assist with the development, operation, and 
maintenance of tools, methods, or processes intended to adequately manage risk in the enterprise server computing 
environment. Examples of such tools, methods, or processes include, but are not limited to: virtual server 
technologies; operating system, service, and application hardening; application or service sandboxing; application 
whitelisting; automated or managed software update deployment; large-scale configuration management; host-based 
intrusion detection or prevention; and to assist in the development, implementation, and maintenance of other 
information security and privacy goals and objectives.  


Title: Security Analyst
Requisition number: 006040
Job description: This position reports within the Information Technology (IT) Security Office. The purpose of the IT 
Security Analyst is to provide IT security operations, which includes, but is not limited to: conducting regular 
vulnerability scans; monitoring IT Security Office consoles for indicators of compromise or other potential security 
incidents; assisting with IT security incident response; conducting or assisting with IT security investigations; and 
assisting in the development, implementation, and maintenance of other information security and privacy goals and 
objectives.