[Hiring] IT Security Architecture Analyst II @Emory University

Role Description

The IT Security Architecture Analyst, within Emory's Enterprise Information Security team, will be primarily responsible for working with the Enterprise Security and other Emory IT teams to identify, evaluate, and implement security controls for IT services. The services may be at the individual, department, division, or enterprise-levels in support of delivering the missions for both Emory University and Emory Healthcare.

• Contribute to and perform security risk assessments for various IT solutions, including risk identification, analysis, and evaluation.
• Identify remediation and/or mitigation requirements and recommendations, and hand off associated risks to the enterprise risk register management process.
• Seek and apply guidance and direction for internal and external customers based on policies, published guidelines, best practices, and industry recommendations.
• Support team by performing research and analysis of vulnerabilities and related consultation to internal and external customers about those vulnerabilities.
• Ensure that information security safeguards and controls are properly communicated and adhered to.
• Conduct assessments of various IT solution providers, applications, processes, vendors, and technologies used by departments, divisions, or the enterprise.
• Contribute to the identification of improvements for multiple areas, including the risk management process and tool improvements.
• Work closely with teams across cloud engineering, enterprise information security, IT, privacy, compliance, legal, procurement, research, and numerous business units.
• Apply background knowledge in IT, system architecture and security, and/or security vendor risk assessments.
• Contribute to the development of risk analysis tools and provide functional guidance and direction to internal and external customer teams.
• Assist with the interpretation of information security policies and requirements or their applicability.
• Perform risk assessments of client vendors through risk assessment toolkit against various frameworks (HIPAA, HITRUST, SOC, NIST, etc.).
• Assess risk for various components of a particular solution's architecture, such as solution services, security controls, network, operating system, database, storage, application vulnerability assessments, security configuration settings, virus prevention and remediation, encryption, network segmentation, remote access, and authentication.
• Assist with information security activities with university or healthcare units across the enterprise.
• Perform other related duties as required.

Qualifications

• A bachelor's degree and three years of related IT experience including demonstrated experience in relevant information security domains, project management skills, OR an equivalent combination of education, training and experience.
• Excellent project management and team participation skills.
• Good written and verbal communication skills.
• A solid background in IT solutions and security concepts, and their development, deployment, and administration.

Requirements

• Experience or exposure to technologies such as AI (chatbots, LLM, ML, DL, generative, NLP, computer vision, agentic, etc.).
• Research cybersecurity (human subject research studies).
• Cloud security fundamentals (AWS, Azure, GCP, etc.).
• Microsoft-connected security concepts (Entra, Graph API, Fabric, etc.).
• Programming fundamentals and code reviews, API, and other academic, research, and/or healthcare relevant technologies.
• Exposure to architecture components such as systems/VMs/docker, networking, databases/NoSQL, mobile apps, authentication, and other enterprise-related architecture offerings.
• Experience in healthcare, university, research, cloud, or medium-to-large enterprise environments in general.
• Knowledge of information security technologies, methodologies, and best practices in the domains of security architecture, vulnerability identification and safeguards, data protection, business continuity, and other relevant security concepts, practices, and experiences.
• Security certifications are a plus (e.g. SANS/GIAC, CISSP, CISA, CISM, AWS, GCP, Azure, etc.).

Benefits

• Tasks related to this position can be performed remotely with only occasional visits to an Emory University location.
• Eastern (EST) time zone business hours may apply.
• Emory reserves the right to change this status with notice to employee.