Information Security Professional I

Facilities and Business Operations:

The Facilities and Business Operations at UCF is dedicated to fostering a conducive educational environment for our faculty, staff, students, and the broader community. We are committed to excellence, providing unparalleled expertise, and maintaining a world-class standard in service.

Please visit us at: https://fs.ucf.edu/ or Facebook and Instagram: UCF Facilities

The Opportunity:

The Information Security Professional I supports the Information Security Office (ISO) Risk and Compliance team by helping safeguard the university's information assets. This role monitors compliance with institutional IT security policies, standards, and applicable laws; supports security awareness and engagement initiatives; and contributes to governance, risk, and compliance (GRC) activities. The position works collaboratively with colleges, departments, and vendors to strengthen the university's overall security posture.

Responsibilities:

Security Awareness & Engagement

• Assist with the development and delivery of the university's security awareness and training program.

• Coordinate ongoing training campaigns, phishing simulations, and targeted educational initiatives.

• Create and support engaging awareness content such as newsletters, intranet posts, presentations, and microlearning modules.

• Support security-related communications and respond to inquiries to promote a strong culture of security.

Governance, Risk & Compliance (GRC) Support

• Contribute to risk and compliance activities, including evidence collection, control monitoring, and documentation updates.

• Assist with policy and standard reviews to ensure alignment with regulatory and industry requirements.

• Participate in internal assessments and support audit preparation efforts.

Risk Register Management

• Support maintenance of the enterprise risk register, ensuring risks are documented, updated, and tracked.

• Coordinate with risk owners to collect status updates and validate mitigation progress.

• Assist in risk categorization, impact and likelihood assessments, and identification of emerging risks or trends.

• Prepare summaries and visualizations for leadership to communicate the university's risk posture.

Metrics & Reporting

• Collect and maintain data related to security training participation, phishing results, and program effectiveness.

• Prepare dashboards and reports that highlight trends, risks, and opportunities for improvement.

• Help identify and refine metrics that demonstrate security program maturity and organizational risk posture.

Minimum Qualifications:

Bachelor's degree; or High School Diploma (or equivalent) and 4 years of relevant work experience in lieu of degree oran equivalent combination of education and experiencepursuant toFla. Stat. 112.219(6).

Preferred Qualifications:

• Experience supporting information security, risk, compliance, or governance programs.

• Experience with security awareness and training programs, including phishing simulations, campaign coordination, or content development.

• Familiarity with risk assessment and risk register management, including documenting risks, tracking mitigation efforts, and supporting risk owners.

• Experience developing metrics, dashboards, or reports to demonstrate security posture, program maturity, or training effectiveness.

Dive intoourTotal Rewards Calculator to discover the diverseselectionavailable to you, giving you a glimpse into the benefits that together shape your comprehensive rewards package at UCF.

Unless explicitlystatedon the job posting, it is UCF's expectation that an employee of UCF willresidein Florida as of the date the employment begins.

#LI-DNI