IT Security Journey - Big Bend Community College : Job Details

Salary: $81,672.00 - $109,848.00 AnnuallyLocation : Moses Lake, WAJob Type: Full-TimeJob Number: 24-69Division: Administrative ServicesDepartment: Big Bend Technology (BBT)Opening Date: 12/20/2024Closing Date: 1/12/2025 12:00 AM PacificPosition Summary Big Bend Community College (BBCC), a rural college serving vibrant, culturally rich communities in the Columbia Basin of Central Washington invites applications for an IT Security Specialist. The IT Security Specialist is responsible for planning, developing, implementing, and maintaining policies, procedures, and processes that enable a secure information technology environment. This includes maintaining current knowledge of security threats and the tools, strategies and tactics used to defend against and mitigate them and participating in the higher education information security community. The IT Security Specialist coordinates with system and network engineers to ensure that those resources are kept secure. Duties include conducting security awareness training, developing secure business and communication practices, identifying security objectives and metrics, evaluating and selecting security products, ensuring that the college is in regulatory compliance, enforcing adherence to security policies and standards, and ensuring the college's data privacy. This position is overtime eligible.This position is represented by the Washington Public Employees Association (WPEA) and reports to the Director of Information Technology.BBCC's organizational strength is captured in our small but mighty spirit. A small college taking on BIG things to enact BIG change to lift our students and employees. We are dedicated to extending postsecondary access to all our service district members and providing an environment for all to grow personally and professionally, steered by our mission and vision. Vision: To become our communities' first choice to dream, learn, and succeed. MissionServe as a BridgeStand as a LeaderSupport for SuccessOur guiding principles are a call to action, establishing a standard for how we interact with each other, present BBCC in the community, serve students AND act upon areas of inequity. Guiding PrinciplesHonor our Role as a Hispanic-Serving InstitutionAdvocate for Equity, Inclusion, & DiversityEmbrace our Workplace Norms Innovate ProactivelyModel IntegrityEducate AllIf you share these values, we encourage you to come be a part of the movement happening at Big Bend Community College. This position closes on January 12, 2025 at 12:00 am . Big Bend Community College reserves the right to offer this position to a qualified candidate at any time, so a prompt response is encouraged. Essential Job Duties Primary essential duties and responsibilities include but will not be limited to the following: SECURITY PLANNING:

• Create and maintain the College's security plan and strategy in compliance with established standards, including State, NIST, GLBA, and WA OCIO.
• Communicate to all constituents the value and importance of information security efforts and ensure that internal IT processes are appropriate for the working environment.
• Evaluate, recommend, and implement security resources such as malware detection software and appliances.
• Lead regular information security audit and compliance processes.
• Create and maintain the College's information security policy and procedure manual.
• Provide guidance and support on security-related decisions and ensure that information security is integrated into the overall operations of the institution.

SECURITY OPERATIONS:

• Monitor network and security systems for alerts and anomalies and adjust systems and processes to maintain a secure environment.
• Perform trend analysis of both local and environmental incidents and evaluate the College's systems for vulnerabilities.
• Analyze risks on an ongoing basis and report new and evolving vulnerabilities.
• Develop and deliver an ongoing data collection process in support of compliance reporting and system design.
• Provide general, regular reports of incidents, trends, user behaviors and new threats and resources.
• Work closely with IT staff to integrate security measures into the overall IT infrastructure and ensure security considerations are taken into account during system and software development.

INCIDENT RESPONSE:

• Coordinate emergency response to large-scale intrusion or attack and provide information about the incident to the College's Public Information Officer (PIO).
• Take the lead with operational response to individual cybersecurity incidents or concerns.
• Create and implement disaster recovery / business continuity plans for any information technology-related incident that would interrupt college operations.
• Review investigations after breaches or incidents, including impact analysis and recommendations for avoiding similar vulnerabilities.

SECURITY PROGRAM:

• Develop guidance for IT staff on security matters and provide training as appropriate.
• Participate in the College's purchasing process and software development projects for the purpose of ensuring that new hardware or software complies with the College's information security policies and procedures.
• Develop, implement, and maintain information security policies, procedures, and guidelines for the college.
• Develop and deliver training programs to educate staff, faculty, and students on information security best practices and policies.

SYSTEM AND NETWORK ADMINISTRATION:

• Coordinate with system and network engineers to deploy, configure, and maintain security tools and technologies.
• Maintain current knowledge on system and network administration and vendor strategies.
• Implement and manage access control mechanisms to ensure that only authorized individuals have access to sensitive information.

OTHER WORK ACTIVITIES:

• Maintains professional growth and development through seminars, workshops and professional affiliations to keep abreast of latest trends in field of expertise.
• Ensures no injuries to self or others by following safe work practices and policies. This includes, but is not limited to: security and safety, understanding of SDS, equipment, infection control, fire, disaster, safe lifting and body mechanics.
• Ensures compliance with college policies and procedures and state and federal regulations.
• Conduct self in a professional manner and ensures the interaction with team members and other support groups is conducted in a courteous and efficient manner conducive to the college's values.
• Perform related duties and responsibilities as may be required.

DUTIES OF THE POSITION REQUIRE EXPERIENCE AND KNOWLEDGE IN:

• Utilize problem-solving abilities, especially in cases requiring quick action and resolution.
• Successfully handle multiple tasks and deal positively with frequent interruptions
• Maintain a high level of confidentiality and adhere to FERPA regulations.
• Candidates must be flexible and adaptable to changing priorities.

DUTIES OF THE POSITION REQUIRE THE ABILITY TO:

• Ability to understand and explain very complex technical concepts to a non-technical audience.
• Ability to occasionally work non-standard hours to ensure a 24-hour, 7-day functioning environment.
• Ability to perform forensic investigations into multiple systems and employee behaviors.
• Ability to monitor and protect the entire technology infrastructure from threat actors.
• Ability to work both independently and as part of a team to deliver outstanding results.
• Ability to work with staff, faculty, and students to ensure a secure environment.

REQUIRED WORK SCHEDULE AND WORK ENVIRONMENT: Basic work schedule is 8:00am to 5:00pm, Monday through Thursday and 8:00am to 2:30pm Friday. Hours may be adjusted to meet the needs of the departments. Some overtime may be required. Travel may be required for meetings, training, conferences, or similar events. In case of a large-scale incident, travel may be required.

• Office work is performed in a normal, temperature-controlled office environment
• Work is active in nature, with occasional kneeling, stooping, crouching, crawling, and climbing; occasional to frequent change in positions from sedentary, standing, stooping, and walking.
• Frequent use of computers and exposure to computer monitors.
• Visual focus and strain .
• Frequent repetitive hand/wrist motions and finger manipulation.
• Move up to 25 lbs. frequently and up to 50 lbs. occasionally.
• Work directly with students, faculty, and staff.
• Work involves frequent interruptions and requirement to answer on demand questions by phone, in person, or electronically.

Minimum & Desirable Qualifications REQUIRED EDUCATION, EXPERIENCE, AND CERTIFICATIONS:

• Bachelor's degree in Information Systems, Cyber Security, Computer Science, Information Technology, or related field from a regionally accredited institution.
• Minimum of 7 years of work experience in cyber security or IT with an emphasis on security frameworks and standards, such as NIST and ISO 27001.
• Professional experience with enterprise-level security systems and tools, such as SIEM, firewalls, and IAM.
• Earned cyber security certification: CISSP or CISM.

DESIRABLE/PREFERRED EDUCATION OR CERTIFICATIONS:

• Experience developing and executing comprehensive cybersecurity programs.
• Professional Information Security work experience within higher education.

Application InstructionsThis position closes on January 12, 2025 at 12:00 am . Big Bend Community College reserves the right to offer this position to a qualified candidate at any time, so a prompt response is encouraged. To qualify for consideration, applicants must meet required qualifications and submit a complete application packet, which includes the following:

BBCC Online application.

Cover letter, addressing why you are interested in this position and how your qualifications make you the ideal candidate.*

Comprehensive resume or CV.*

Response(s) to the questions found in the Supplemental Questions Tab above.* Supplemental questions are designed to address the Additional Desirable qualifications list in the job posting.

Unofficial transcripts documenting undergraduate and graduate course work and degrees. Official transcripts required upon employment.*

All IT Certifications.

NOTE: You must complete the online application in full and respond to the required supplemental questions. Failure to provide this information or responses of See Resume may eliminate you from consideration for this position. The college reserves the right to remove documents, submitted but not requested, by BBCC as part of the application process. These documents include, but are not limited to statements of teaching philosophy, diversity statement, letters of recommendation, student evaluations, performance evaluations, etc. BBCC reserves the right to not fill this position, reject all applicants, reopen the position, or make a direct appointment. Applications received during this recruitment may be used to fill future vacancies at the College's discretion.This posting does not reflect the entire job description and may be changed and/or modified, at any time, without notice. If you have difficulty logging into your account, attaching documents, submitting your application, etc., please contact NEOGOV Customer Service at 1-855-###-####.CONDITIONS OF EMPLOYMENT:Pursuant to RCW 28B.112.080, applicants must declare whether they are the subject of any substantiated findings of sexual misconduct in any current or former employment or are currently being investigated for, or have left a position during an investigation into, a violation of any sexual misconduct policy at the applicant's current or past employers. By law, post-secondary education institutions cannot hire an applicant who does not complete the questions. Prior to employment, a background check including criminal record history will be conducted. Information from the background check will not necessarily preclude employment but will be considered in determining the applicant's suitability and competence to perform the position. An offer of employment will not carry with it any responsibility or obligation on the part of Big Bend Community College to sponsor an H-1B visa. In compliance with the Immigration Reform and Control Act of 1986, proof of authorization to work in the United States will be required at the time of hire.Official transcripts must be provided to the college upon hire. REASONABLE ACCOMMODATION: Big Bend provides reasonable accommodations for qualified students, employees, and applicants with disabilities in accordance with the American with Disabilities Act and Section 504 of the Federal Rehabilitation Act of 1973.Please direct all inquiries regarding compliance with access, equal opportunity, and/or grievances to the Vice President of Human Resources & Labor/Equal Opportunity Officer/Title IX Coordinator/Section 504 Coordinator, BBCC 7662 Chanute Street NE, Moses Lake, WA 98837; 509-###-#### or via email at . DRUG AND ALCOHOL-FREE CAMPUS:In compliance with state and federal regulations, BBCC is committed to a safe and drug and alcohol-free campus. Employees are expected to comply with BBCC's policy prohibiting illegal drug use or activity, including notifications of criminal drug convictions and the use of prescription drugs or over-the-counter medications that are likely to affect job safety. The complete policy and procedure are available to view on the of the BBCC website. Printed copies of the policy and procedure are available by contacting the Human Resources Office at 509-###-####.BBCC ANNUAL SECURITY REPORT:BBCC strives to be a safe and secure campus for our students, employees, and community. Detailed information regarding campus security, crime statistics for the most recent-three year period, and other information is available on the of the BBCC website. If you have questions or would like a printed copy of the materials please contact Campus Safety and Security at 509-###-####.EQUAL OPPORTUNITY: Big Bend Community College provides equal opportunity in education and employment and does not discriminate on the basis of race, sex, sexual orientation, gender identity/expression, religion, age, color, creed, national or ethnic origin, physical, mental or sensory disability, use of a trained guide dog or service animal by a person with a disability, marital status, pregnancy status or families with children, a mother breastfeeding her child, AIDS/HIV or hepatitis C, genetic information, and/or status as a veteran or any other legally protected classification. Big Bend Community College provides a robust benefit package. The benefits, programs, and services offered are a sizable amount of an employee's overall compensation and an important factor in encouraging a healthy work-life balance. Our package includes health, vision, prescription drug, and dental insurance for the employee and dependents. There are several plans with affordable monthly premiums that offer coverage throughout the state. Employees are also covered by basic life insurance, AD&D, and long-term disability insurance, with the option to purchase additional coverage amounts. Additional insurance coverage, like auto insurance, is available to state employees at reduced rates. Visit Washington Health Care Authority's Public Employee Benefits Board (PEBB) Program at We will help you prepare for life after your career by offering an excellent retirement plan, which includes employer contributions. In addition, employees have the option to participate in two tax-deferred retirement investment programs.Leave benefits include 12 paid holidays, 12 days of sick leave, and vacation accrual of 12-24 days of vacation per year. Big Bend encourages staff development, and personal and professional growth. Internal and external opportunities for training and development are offered each year to build employee competencies and develop leadership capacity. Participation in the State Employee Tuition Waiver program provide further potential for personal and career growth.For more information on what Washington State has to offer, visit Experience Washington at For more information on the college you may visit our website at 01 Did you submit a copy of your Bachelor's degree transcript and all IT certifications?

• Yes
• No

02 Explain your 7 years or more of work experience in cyber security or IT with an emphasis on security frameworks and standards, such as NIST and ISO 27001. 03 Explain your professional experience with enterprise-level security systems and tools, such as SIEM, firewalls, and IAM. 04 How many years do you have developing and executing comprehensive cybersecurity programs? 05 Do you have professional information security work experience within higher education?

• Yes
• No

Required Question