The Information Security Analyst is responsible for the implementation of the Information Security Office governance, risk management, compliance, and awareness program. The position will conduct risk assessments; coordinate audit engagements with relevant parties; maintain policies, standards and procedures designed to safeguard information and resources; manage information security awareness training. In addition, conduct vulnerability assessments and security reviews through vulnerability scans and penetration tests to determine deviations from acceptable configurations, policies, and standards. Finally, the incumbent will assess levels of risk and recommend appropriate mitigation controls. This position is classified as predominantly remote with occasional visits to campus as needed. Working hours will be based on Pacific Standard Time (PST). The full salary range for the Information Security Analyst is $88,301.52 - $162,425.52 annually. However, the pay scale for this position is up to $121,785.30 annually. We base salary offers on a variety of considerations, such as education, licensure and certifications, experience, and other business and organizational needs. Applicants must have current work authorization when accepting a UCR staff position. Currently, UCR is unable to sponsor or take over sponsorship of an employment Visa for staff. As a University employee, you will be required to comply with all applicable University policies and/or collective bargaining agreements, as may be amended from time to time. Federal, state, or local government directives may impose additional requirements. degree Bachelor's degree in related area and/or equivalent experience/training. Required experience Minimum of 4 - 7 years of related experience in information security, IT risk management, compliance, or a related field. Required Must pass a background check. required Required Ability to follow department processes and procedures. Demonstrated experience selecting and applying appropriate data encryption technologies. Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks. Demonstrated skills applying security controls to computer software and hardware. Knowledge of computer hardware, software and network security issues and approaches. Interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization. Experience using IT security systems and tools. Knowledge of data encryption techniques. Experience analyzing logs for security breaches. Basic skill at reading and interpreting security logs. Basic skill at reading and interpreting security logs. Required