 | NEW MEXICO STATE UNIVERSITY |
HUMAN RESOURCES SERVICES | |
POSITION CLASSIFICATION DESCRIPTION | |
| Position Classification Title: | Data Security Analyst,Sr |
| Position Classification Code: | M4046 |
| Job Family: | Information Technology |
| Pay Level: | 10 |
| Exempt Status: | Exempt |
| This description is intended to describe the general nature of the work being performed. It is not intended to be a complete list of specific duties of any particular position. Duties, responsibilities and bargaining unit eligibility may vary based on the specific tasks assigned to the position. | |
| Purpose of Classification: | |
| Monitors, evaluates, and maintains systems and procedures to protect the data systems and databases from unauthorized users. Identifies potential threats and responds to reported security violations. Determines causes of security violations and recommends corrective actions to ensure data security. Possesses and applies broad knowledge of principles, practices and procedures to the completion of moderately difficult assignments. | |
| Standard Duties: | |
| Oversees the supervision of personnel to include: work allocation, training, promotion and enforcement of internal procedures and controls and problem resolution; evaluates performance and makes recommendations for personnel actions; motivates employees to achieve peak productivity and performance. Participates in defining and implementing overall security strategy, policies, and procedures. Provides security advice and guidance to systems engineers and management.Assists in communicating security procedures to users. Participates in physical security projects and develop physical security and safety skill sets. Performs security audits, risk analysis, and application-level vulnerability testing and reviews. Collaborates on solutions to mitigate risks and enhance system security. Researches, recommends, and implements changes to procedures and systems to enhance data systems security. Implements cost effective security controls to meet corporate security requirements. Leads security projects including requirements definition, task planning, research, testing, implementation, and management. Assists in developing security awareness materials, security presentations, and information security training sessions. Usually works with minimum supervision, conferring with superior on unusual matters. Assignments are broad in nature, usually requiring originality and ingenuity. Has appreciable latitude for un-reviewed action or decision. Performs miscellaneous job-related duties as assigned. | |
| Knowledge, Skills and Abilities: | |
| University and department policies and procedures; principles and practices of organization and administration; principles of supervision, training, and performance evaluation; advanced knowledge of information security and computer network access technologies. In-depth technical knowledge in implementing data protection and integrity, operating systems and network security, authentication, and security protocols. | |
| Short- and long-range planning; problem analysis and resolution; report preparation and presentation; public contact and relations; oral and written communication; strong interpersonal and communication skills to work effectively with team and other business units; proven project management skills. | |
| Direct, evaluate, train, and supervise the work of assigned personnel; develop and maintain effective working relationships; maintain accurate and orderly records; use independent judgment and initiative; organize and direct activities; analyze and evaluate information; ability to maintain operational computer and network security, firewall administration, virus protection, intrusion detection and prevention, automated security patching, and vulnerability scanning systems; ability to administer information security programs including risk assessments and forensic research, designing security architectures, developing policies, gathering metrics and reporting status. | |
| Minimum Qualifications: | |
| Education- Bachelor's degree in a related field. | |
| Experience- Five (5) years of experience directly related to the standard duties as outlined. | |
| Equivalency- None | |
| Certifications/License- | |
| Departmental Requirements- | |
| Special Requirements- | |