Manage all IT-related risk and compliance processes, including Risk Analyst staff and consultants. Monitor the performance of the IT Risk and Compliance Program and related activities on a continuing basis.Conduct in-depth information technology risk assessments including identifying and documenting controls, creating detailed process flows, identifying potential gaps and/or inconsistencies and making sound recommendations for improvement and/or mitigation. Review third party vendor contracts and University information technology projects to ensure appropriate security and compliance controls are in place and functioning effectively. Track action steps and ensure that findings are handled appropriately and in a timely manner. Provides reports to the Information Security Officer on a regular basis, and as directed or requested, of the operation and progress of compliance efforts.Consult on information security standards and industry best practices. Answer questions from internal and external audit on information technology controls. Collaborate with University Risk Management and Audit, General Counsel, Procurement and Payment Services, and other groups on and off campus on IT Risk and Compliance issues. Ensure that IT operational staff are appropriately trained and knowledgeable about information technology controls. Maintain and propagate awareness of relevant federal, state and local laws and industry regulations and plan to achieve and maintain compliance of IT Services in an increasingly complex regulatory environmentMaintain professional contacts within the information technology industry and a broad base of industry knowledge in order to provide relevant input into decision-making processes. Participate within peer groups, industry standards bodies, consortia, and related forums (as approved) to address issues of concern to the University and maintain knowledge of industry trends and directions.

Execute IT Security Incident Response procedures and other IT Security processes, including standard response playbooks for common incidents, lead investigator on major incidents, tuning intrusion prevention systems (TippingPoint SMS), scripting anomaly analysis, SSL certificate duties (including DCV and basic issuing duties), and working with other campus IT units on cross-divisional matters.Implementing new security technology and processes, conducting security reviews and audits, and assisting on projects with security implications, such as full disk encryption, vulnerability management, staff transition policy, and PCI compliance.Monitor network and systems logs for security intrusions and incidents, using shell scripts, QRadar, and custom reports from systems such as Workday.Administer IT Security systems, including updates, backups, and upgrades for Windows and Unix servers.Research security issues and contribute to IT Security communications.Document internal processes and writing security standards and guidelines, both formally for other IT units and internally in a wiki knowledgebase.Maintain awareness of emerging security technologies, trends and threats, participating in education working groups and information distribution operations.

This position is an expansion of my previous job, so the duties listed here are actually IN ADDITION to the prior set of duties and responsibilities:Directed technical staff on maintenance, testing, and policy for campus learning management system (LMS), an implementation of Blackboard; and helped support a faculty pilot project for the Canvas LMS. Led team of two academic technology support analysts who supported both the Canvas pilot and campus LMS, worked on documentation, and provided faculty support. Chaired Student IT Committee, meeting twice quarterly with a cross-discipline group of students to address concerns, introduce new topics, and seek feedback on initiatives.Represented entire unit in the IT Services-wide Change Advisory Board, discussing, vetting, and approving changes to IT infrastructure.

Note: my prior position was reclassified into this position, thus inheriting the same responsibilities I'd already been doing, but expanding them to include explicit budgetary authority.Partnered with Director of Support Services to create job descriptions and scope documents for new in-person point of service, the IT Services TECHB@R. Each week, the TECHB@R now handles up to 250 in-person consults and lends up to 900 technology items.Created equipment lending program with inventory of $50,000 in laptops, iPads, DSLRs, and adapters.Hired and led team of two full time staff and thirteen student staff, supervising day-to-day operations and budget.Supported special organization-wide projects, including building-wide network migrations, VIP client consultations, and high-touch, personalized support for faculty.Provided on-call desktop support for the Institute of Molecular Engineering’s faculty, administrative staff, and student body.Led high-profile events support, including coordination of on-call technical coverage, location walkthroughs, vendor liaison duties, and ordering infrastructure improvements.Served as departmental liaison to the Humanities Division and Divinity School, conducting regular meetings, reports, and escalating issues to the proper internal teams.Partnered with academic technologists and Library staff to provide programming for faculty, staff, and students in the University community, including individualized tutoring for advanced research applications like R, SPSS, and ArcGIS.Assisted IT Security with incident remediation, including isolating confidential data, client triage, and securing compromised devices.

Partnered with Director of Support Services to create job descriptions and scope documents for new in-person point of service, the IT Services TECHB@R. Each week, the TECHB@R now handles up to 250 in-person consults and lends up to 900 technology items.Created equipment lending program with inventory of $50,000 in laptops, iPads, DSLRs, and adapters.Hired and led team of two full time staff and thirteen student staff, supervising day-to-day operations and budget.Supported special organization-wide projects, including building-wide network migrations, VIP client consultations, and high-touch, personalized support for faculty.Provided on-call desktop support for the Institute of Molecular Engineering’s faculty, administrative staff, and student body.Led high-profile events support, including coordination of on-call technical coverage, location walkthroughs, vendor liaison duties, and ordering infrastructure improvements.Served as departmental liaison to the Humanities Division and Divinity School, conducting regular meetings, reports, and escalating issues to the proper internal teams.Partnered with academic technologists and Library staff to provide programming for faculty, staff, and students in the University community, including individualized tutoring for advanced research applications like R, SPSS, and ArcGIS.Assisted IT Security with incident remediation, including isolating confidential data, client triage, and securing compromised devices.

Provided support for alumni, students, staff, and faculty, including VIP clients such as deans, directors, and CTO, via phone, email, and on-site visit.Developed support policies, knowledgebase content, client communications, and led collaboration with other University IT groups.Administered campus mailing list and email systems, including log searches, mailing list configuration and setup, and account troubleshooting.Worked closely with the College to organize IT Services orientation activities for incoming students as part of College-wide orientation programming, recruited and scheduled volunteers, and helped properly budget IT Services resources.

Supported students, staff, and summer conference guest needs through in-person visits, phone, and email.Diagnosed and repaired computing lab equipment.Managed two student computing assistants, helped train 15 student-staff.