The Information Security Engineer provides security engineering expertise to the NYU community. Manage information and cybersecurity engagements and deliver security engineering and audit services for all technology change initiatives to all business units and schools including global locations. Partner with schools and units, critical stakeholders in Research, and various IT teams to define the scope, work effort, and deliverables for the information security engagement and oversee multiple arrangements. Document and address NYU information security, and hybrid Cloud and systems security engineering requirements throughout the acquisition life cycle working. Identify opportunities for improvement and further development of services, including the development of cybersecurity technical standards and guidelines. Identify cybersecurity control requirements for technology and secure research initiatives. Design effective and practical solutions to meet those requirements in alignment with the overall objectives while establishing buy-in from the schools and units. Act as a subject matter expert, assess the business impact of information security risks in the enterprise, and identify options and recommendations for mitigating those risks. The Information Security Engineer is vital in safeguarding research and intellectual property. Understanding of security frameworks such as NIST and ISO, comprehending information security regulations, and proactively identifying and addressing emerging compliance issues and threats to research assets. Audit system security via the GOIS Security Validation Process. Evaluate and develop secure solutions based on approved security architectures. Work closely with other functional area engineers and information security specialists to ensure acceptable security solutions are in place throughout all IT systems and platforms to mitigate identified risks sufficiently and support NYU objectives. Communicate information security and secure research risks and solutions to various technical and non-technical audiences and levels of management. Communicate and interact effectively and professionally with co-workers, management, internal and external customers, and partners.

Required Education:
Bachelor's Degree or equivalent combination of education and experience

Required Experience:
5+ years experience involving information technology and/or information security, compliance, or risk management.

Preferred Experience:
5+ years Experience with structured Information Security Enterprise Architecture practices, hybrid cloud deployments, and on-premise-to-cloud migration deployments. Experience in designing, implementing, and delivering security for cloud-native, distributed computing, and architectural solutions with the principle of 'Secure by Design. Experience delivering information security expertise through a deep understanding of the academic and secure research environment, IT security technologies, and processes supporting the university research mission. Maintaining and applying understanding of NIST frameworks to public cloud solutions. Providing timely operational, technical, and consultative guidance to promote a secure and compliant technology environment by maintaining confidentiality and acting with the highest ethical standards.

Required Skills, Knowledge and Abilities:
Demonstrated understanding of IT security principles and concepts. Ability to communicate information and security concepts to non-technical audiences. Knowledge of cybersecurity applied to the cloud, data, applications, platforms, operating systems, and networks. Have a strong working understanding of information and cybersecurity architectural principles and models. Ability to develop cybersecurity standards and patterns. Strong ability to navigate an NYU multi-school and global campuses environment and build cross-functional relationships with the local IT and security leadership teams. Organized, process-oriented, and able to manage multiple concurrent work streams. Excellent written and verbal communication skills. Must be able to effectively communicate technically with strong understanding of Zero Trust, Privileged Access Management, and Identity Management to lead multifunctional projects or initiativesknowledge of laws, regulations, and standards relevant to higher education.

Preferred Skills, Knowledge and Abilities:
Knowledge of advanced security controls and information security best practices. Knowledge of enterprise infrastructure and application monitoring tools. Familiarity with security frameworks such as CIS, NIST, ISO, and PCI-DSS. Familiarity with cloud architecture and security concepts. Working knowledge of computer network protocols, network security architecture, and computer architecture. Working knowledge of network systems, security principles, applications, and risk and compliance initiatives. Advanced knowledge of Risk assessment and Compliance processes and required supporting artifacts. Understanding of contemporary security theory and application (including vulnerabilities, exploitation techniques, and attack vectors). Knowledge in developing processes and systems for building and maintaining high-performance computing and cloud systems and secure research enclaves in an efficient, compliant, and repeatable fashion.

In compliance with NYC's Pay Transparency Act, the annual base salary range for this position is USD $130,000.00 to USD $150,000.00. New York University considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer. This pay range represents base pay only and excludes any additional items such as incentives, bonuses, clinical compensation, or other items.

NYU aims to be among the greenest urban campuses in the country and carbon neutral by 2040. Learn more at nyu.edu/nyugreen.

NYU is an Equal Opportunity Employer and is committed to a policy of equal treatment and opportunity in every aspect of its recruitment and hiring process without regard to age, alienage, caregiver status, childbirth, citizenship status, color, creed, disability, domestic violence victim status, ethnicity, familial status, gender and/or gender identity or expression, marital status, military status, national origin, parental status, partnership status, predisposing genetic characteristics, pregnancy, race, religion, reproductive health decision making, sex, sexual orientation, unemployment status, veteran status, or any other legally protected basis. All interested persons are encouraged to apply at all levels.

PI275333104

About New York University

New York University (NYU) is one of the top private universities in the United States, and NYU Tandon School of Engineering traces its roots back to 1854, building on an illustrious past as Brooklyn Poly and the NYU Polytechnic School of Engineering. Our mission is to excel in research, teaching, and entrepreneurship and inspire and educate engineers for the 21st century — backed by an historic commitment of $1 billion to recruit new faculty, fuel groundbreaking basic and applied research in key areas, and expand the Downtown Brooklyn campus. NYU Tandon faculty are world renowned leaders in science and technology, with a strong commitment to research, innovation, and entrepreneurship that make a difference in the world. We lead and have ties to multidisciplinary centers in wireless technology, cybersecurity, urban informatics, data sciences, artificial intelligence, renewable energy, and health, among others. Our faculty and students are part of the high-tech start-up culture in New York City and in downtown Brooklyn, and we support three “future lab” business incubators that connect our students and faculty to today’s innovation economy. We are deeply committed to teaching and le...arning, and with NYU's unrivaled global network of campuses, we promote a truly global engineering education. NYU Tandon is committed to substantially increase the proportion of our faculty from historically underrepresented groups in STEM and we encourage candidates from such groups to apply. We aspire to create a climate where diversity and inclusion are not only appreciated but considered an asset for creativity and innovation, and we seek faculty who have a real passion for a culturally diverse environment. We take pride in our high numbers of female students and students who are the first in their family to go to college. NYU belongs to the Higher Education Recruitment Consortium (HERC), which assists with dual-career searches, and our faculty are supported by a range of work-life balance programs provided by the NYU Office of Work Life

Show more

Show less

Connections working at New York University