IT Security Professional

Hybrid: This position may be eligible for a hybrid work arrangement that may include a partially remote work location, consistent with System Office policy. UNC-Chapel Hill employees are generally required to reside within a reasonable commuting distance of their assigned duty station.

The IT Security Professional is the primary resource for specialized security standards and policies within the Division of Finance and Operations (F&O), Institutional Integrity and Risk Management (IIRM), and other groups supported by Finance and Operations Information Technology (FOIT).

This position implements preventative security measures to support end users and business units by identifying and addressing security issues through research and patching software vulnerabilities. Responsibilities include anticipating security breaches, recommending best practices for compliance with internal and external security policies, conducting risk analyses on software installations, reviewing software purchases, and implementing remediation measures. Enforce security guidelines independently to strengthen customer systems and collaborate with leadership on planning and risk assessment.

Additionally, the position serves as the security expert for FOIT s security review program, guiding other departments in compliance with security practices and university standards. Collaborate with leadership and the ITS Security Office on policy implementation, coordinate incident responses, and monitor security trends. Provide technical support as needed by prioritizing security service requests and ensure thorough documentation. Administer security guidance for FOIT-supported devices, including PCs, peripherals, and mobile devices, and resolve complex technical issues with expertise in networks, hardware, and software.

The IT Security Professional drives ongoing improvements for the department by monitoring key performance metrics, troubleshooting shared storage issues, ensuring the confidentiality of sensitive data, and developing policies and administrative procedures to enhance desktop support and customer service.