Overview
The Wisconsin Foundation and Alumni Association (WFAA)*, the private fundraising and alumni relations organization for UW-Madison, is recruiting for a Security Administrator to join our Technical Services & Support Team. The Security Administrator plays a critical role and is responsible for the installation, administration, and troubleshooting of our organization’s security solutions. The primary focus will be on safeguarding our information and technology assets by monitoring security systems, identifying vulnerabilities, responding swiftly to incidents, and implementing solutions to prevent cyber attacks. The ideal candidate will have a strong understanding of cyber security principles, a proactive approach to risk management, and the ability to thrive in a fast-paced environment. This position is a hybrid role and will require you to work in the office at least two days weekly.
Who is WFAA?
The Wisconsin Foundation and Alumni Association is a private, nonprofit corporation that encourages individuals and organizations to make gifts to the university and to connect with the UW. In 2014, the UW Foundation merged with the Wisconsin Alumni Association® to better serve a growing population of UW alumni and donors. We believe that private support grows out of good relationships between campus leaders, faculty and program staff who need support, and the alumni and friends who want to invest in UW–Madison. We provide important engagement opportunities to link UW–Madison alumni to each other and to their alma mater, building a strong community of Badgers.
Diversity and Inclusion
Just as the university community benefits from differing viewpoints, perspectives, and experiences, inclusion and diversity are imperative for the success of our mission. WFAA values people and the differences that they bring to the organization, and creates an environment in which all staff members and constituents feel respected and have opportunities to thrive.
Essential Functions
Security Administration
- Monitor security alerts and other security tickets to identify and respond to potential threats.
- Manage and maintain security systems such as firewalls, intrusion detection/prevention systems (IDS/IPS), anti-virus software, and encryption solutions.
- Ensure proper configuration and management of security tools and software.
- Review and analyze security configurations for infrastructure and operating systems.
- Stay up to date with the latest cyber security trends, threats, and technologies.
- Recommend and implement improvements to enhance the organization’s security posture.
- Maintain detailed documentation of security configurations, procedures, and incident response activities.
- Prepare and present security reports to management, highlighting key risks, incidents, and compliance status.
Incident Response
- Lead or participate in the investigation and response to security incidents, including data breaches, malware infections, and other cyber threats.
- Develop and maintain incident response plans and procedures.
- Coordinate with external parties as necessary during security incidents.
- Conduct post-incident analysis to identify root causes and recommend improvements.
- Research, test, and implement incident response tools.
Vulnerability and Threat Assessment
- Research and identify vulnerabilities using vulnerability management tools and provide guidance and remediation strategies.
- Stay up to date on latest cyber threats, attack vectors, and threat intelligence.
- Recommend, implement, and validate security hardening on WFAA endpoints and infrastructure.
Compliance and Risk Management
- Assess WFAA compliance with relevant regulations, and standards, such as HIPAA and PCI-DSS and make appropriate recommendations to maintain or improve compliance.
- Assist with risk assessments and compliance audits to identify potential security risks and vulnerabilities.
- Assist with vulnerability assessments and penetration testing to identify and address security weaknesses.
- Maintain documentation and evidence for audits and regulatory reporting.
- Develop and implement security policies and procedures that align with industry best practices and regulatory requirements.
- Participate in internal and external audits, providing evidence of compliance and addressing any identified deficiencies.
Security Awareness and Training
- Research training content and make recommendations for security awareness training for employees.
- Work with Human Resources to develop and deliver security awareness content to educate employees about cyber security risks and best practices.
- Promote a culture of security awareness across the organization.
Qualifications
Required Qualifications:
- Associate’s or Bachelor’s degree in Information Technology, Computer Science or relative experience that provides equivalent knowledge, skills, or abilities.
- 4 + years of experience in cyber security or a related field.
- Experience with security frameworks and standards (e.g., NIST, ISO 27001).
- Hands-on experience with security tools and technologies such as SIEM, IDS/IPS, firewalls, and endpoint protection.
- Strong understanding of cyber security principles, protocols, and best practices.
- Knowledge of regulatory frameworks and compliance standards.
Other Qualifications:
- Excellent analytical and problem-solving skills.
- Ability to work under pressure and handle multiple tasks simultaneously.
- Strong communication and interpersonal skills.
- Ability to work effectively in a team environment and collaborate with cross-functional teams.
- Ability to lead projects.
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Certified Ethical Hacker (CEH)
- CompTIA Security+
- GIAC Security Essentials (GSEC)
WFAA is committed to provide our employees with an environment that is inspiring, creative and respectful. We offer competitive pay and an excellent benefits program, which includes a 10% 401k contribution after 1 year of service!
The Wisconsin Foundation and Alumni Association is an Equal Opportunity Employer *The Wisconsin Foundation and Alumni Association (advanceuw.org) is the “doing business as” name of the merged organization comprising the University of Wisconsin Foundation (supportuw.org) and the Wisconsin Alumni Association (uwalumni.com). Its legal corporate name is registered as the University of Wisconsin Foundation.