What are the responsibilities and job description for the IT Security Professional - 2 position at UNC Finance and Operations?
The IT Security Professional is a senior-level technical position within Finance and Operations IT (FOIT) at the University of North Carolina at Chapel Hill. This position serves as a subject matter expert and primary escalation resource responsible for the planning, implementation, and ongoing management of secure, high-performance information technology infrastructure and systems.
This role requires advanced and broad expertise spanning information security, server and database administration, network architecture, web application development, and IT project management. The IT Security Professional leads efforts to protect University systems and data by designing and maintaining network security architecture, deploying and managing security monitoring tools, directing forensic analysis and incident response, and establishing security policies and procedures in compliance with applicable University, state, and federal requirements.
The position serves as a critical escalation resource, supporting peers, ITS management, and departmental units in resolving complex technical incidents and security events. The IT Security Professional actively participates in security policy and planning decisions and provides expert consultation to departmental computing organizations on secure operations, change management processes, segregation of duties, and coding best practices.
Additional responsibilities include managing IT projects from initiation through completion, ensuring systems that handle sensitive or restricted data are delivered on schedule, within scope, and with appropriate safeguards. The position collaborates with administrators and stakeholders to assess technology needs, recommend solutions, and drive continuous improvement of IT systems and workflows. The IT Security Professional also plays a central role in disaster recovery and business continuity planning and contributes to ongoing monitoring, reporting, and enhancement of the unit's overall security posture.
This position requires strong analytical, communication, and problem-solving skills and the ability to work effectively across organizational units in a complex university environment. Some after-hours availability may be required to respond to security incidents or to implement planned system changes with minimal service disruption.
This role requires advanced and broad expertise spanning information security, server and database administration, network architecture, web application development, and IT project management. The IT Security Professional leads efforts to protect University systems and data by designing and maintaining network security architecture, deploying and managing security monitoring tools, directing forensic analysis and incident response, and establishing security policies and procedures in compliance with applicable University, state, and federal requirements.
The position serves as a critical escalation resource, supporting peers, ITS management, and departmental units in resolving complex technical incidents and security events. The IT Security Professional actively participates in security policy and planning decisions and provides expert consultation to departmental computing organizations on secure operations, change management processes, segregation of duties, and coding best practices.
Additional responsibilities include managing IT projects from initiation through completion, ensuring systems that handle sensitive or restricted data are delivered on schedule, within scope, and with appropriate safeguards. The position collaborates with administrators and stakeholders to assess technology needs, recommend solutions, and drive continuous improvement of IT systems and workflows. The IT Security Professional also plays a central role in disaster recovery and business continuity planning and contributes to ongoing monitoring, reporting, and enhancement of the unit's overall security posture.
This position requires strong analytical, communication, and problem-solving skills and the ability to work effectively across organizational units in a complex university environment. Some after-hours availability may be required to respond to security incidents or to implement planned system changes with minimal service disruption.