Cybersecurity Specialist

Job Description

UW Information Technology (UW-IT) has an outstanding opportunity for Cybersecurity Specialist to join their team.

About this Opportunity

Reporting to Director of Risk Management Services, the Cybersecurity Specialist is responsible for managing institutional information security risk and support secure research computing across the University. The Cybersecurity Specialist partners cross-functionally to architect and deliver security solutions, communicates risk to technical and non-technical audiences, and supports compliance for regulated research (NIST 800-171, CMMC, DFARS). The role advances the division's mission of proactively assessing and managing information security risk in partnership with executive management, UW departments, and academic partners, with particular emphasis on secure cloud and research computing environments.

Key Responsibilities

1. Partner with cross-functional teams to architect and deliver information security solutions that strategically align with current UW mission and goals along with applicable regulatory requirements, including supporting research activities, and evaluating emerging cloud services and security technologies. (30%)

2. Conduct risk assessments of complex systems to identify, and track, exploitable vectors and communicate effective remediation strategies to decision makers. (25%)

3. Act as SME (Subject Matter Expert) and guide university organizations to manage their risk and promote their development and implementation of an information security strategy. Where appropriate, enter qualifying findings into the risk registry and prepare reports that are ultimately shared with executive management. Also coordinates security and compliance assessments for research computing environments, and helps develop, reviews, and maintains System Security Plans (SSPs), POA&Ms, and audit evidence supporting NIST 800-171, CMMC, and DFARS assessments for regulated research systems. (10%)

4. Provide information security expertise as part of vendor product risk assessments to help secure UW systems, including risk reviews of third-party tools and vendors used in research workflows. (10%)

5. Stay up to date with current threats, risks, vulnerabilities, and relevant technologies via both online presentations and in-person security conferences. (5%)

6. Provide general advice and assistance on topics relating to information security issues that impact higher education, including providing consultation for compliance and security requirements across a broad area of the University and serving as a technical resource for researchers and technical staff on security best practices. (5%)

7. Contribute to information security incident response and analysis, as needed, including security incident investigations involving research computing environments, with appropriate risk analysis and actionable security solutions for mitigation. Review and evaluate proposed data classification (e.g., CUI), access control, encryption configurations, and security architecture/design decisions (e.g., control selection, network segmentation, trust boundaries) for research computing and cloud environments against required security baselines, and provide findings and recommendations to system engineers. (5%)

8. Participate in ongoing information security outreach activities. (5%)

9. Perform other duties as assigned, including developing and documenting repeatable workflows and knowledge-based articles. (5%)

Required Qualifications

To be considered for this opportunity your application must demonstrate you meet both the minimum qualifications and additional qualifications listed below. Equivalent education and/or experience may substitute for minimum qualifications except when there are legal requirements, such as a license, certification, and/or registration.

Minimum Qualifications

• Bachelors degree in Computer Science, Cybersecurity, Engineering or a related field or experience

• Four years of relevant experience and progressive responsibility working in a consultative capacity in a large enterprise environment.

• Strong written, verbal, and listening skills to effectively communicate with and provide consultation to technical and non-technical audiences.

• Deductive reasoning, critical thinking, problem solving skills.

• Strong interpersonal skills to influence, motivate, persuade, mentor and train diverse groups or individuals.

• Ability to architect and deliver actionable information security solutions.

• Ability to conceptualize new ideas and complex technical matters quickly.

• Ability to work with a diverse constituency, in collaborative groups, building consensus and fostering ongoing relationships.

• Ability to work independently with minimal supervision.

Applicants who do not meet these qualifications WILL NOT be forwarded to the Hiring Manager.

Preferred Qualifications

• Experience with information security in higher education is preferred

• Professional certification is preferred (e.g., CISSP, CISA, CEH, GPEN, GSNA, GCIH, etc.) Cloud/compliance certifications are also relevant (e.g., AWS, Security+, CCSP).

• Experience supporting secure research computing, high-performance computing (HPC), or scientific computing environments.

• Experience with security assessments, vulnerability management, or security operations.

• Experience supporting regulated or sensitive research environments.

• Experience implementing, administering, and supporting cloud security and compliance practices within enterprise or research computing environments (AWS, Google Cloud Platform, Microsoft Azure, or comparable).

• Experience supporting or implementing security controls, risk management, or compliance frameworks, including NIST 800-171, CMMC, and DFARS requirements for regulated research environments.

Working Conditions

Hybrid, open office environment.

About the Team

UWIT is the University of Washington’s central IT organization, supporting all three campuses, UW medical centers, and global research. We partner across the University to power teaching, learning, innovation, and discovery. We are here to serve UW.

Information Security within UWIT, supports a secure digital environment for research, learning, and discovery by strengthening the University’s ability to manage risk and respond to threats. Our work supports secure, compliant, and resilient technology operations, building trust in how UW stewards personal and institutional data.

Our program is grounded in NIST standards, using the NIST Cybersecurity Framework and related Special Publications as the foundation for how we approach security, privacy, and risk management.

Compensation, Benefits and Position Details

Pay Range Minimum:

$102,612.00 annualPay Range Maximum:

$150,000.00 annualOther Compensation:

-Benefits:

For information about benefits for this position, visit https://www.washington.edu/jobs/benefits-for-uw-staff/Shift:

First Shift (United States of America)Temporary or Regular?

This is a regular positionFTE (Full-Time Equivalent):

100.00%Union/Bargaining Unit:

Not Applicable

About the UW 

Working at the University of Washington provides a unique opportunity to change lives – on our campuses, in our state and around the world.  

UW employees bring their boundless energy, creative problem-solving skills and dedication to building stronger minds and a healthier world. In return, they enjoy outstanding benefits, opportunities for professional growth and the chance to work in an environment known for its diversity, intellectual excitement, artistic pursuits and natural beauty. 

Our Commitment 

The University of Washington is committed to fostering an inclusive, respectful and welcoming community for all. As an equal opportunity employer, the University considers applicants for employment without regard to race, color, creed, religion, national origin, citizenship, sex, pregnancy, age, marital status, sexual orientation, gender identity or expression, genetic information, disability, or veteran status consistent with UW Executive Order No. 81.

To request disability accommodation in the application process, contact the Disability Services Office at 206-543-6450 or dso@uw.edu. 

Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington state law.