Sara Rubenstein

About Sara Rubenstein

Higher Ed professional who loves working with people, processes, and technology to engage stakeholders and improve operations. I am a life long learner, data enthusiast, and technology early adopter. I am currently at the University of Missouri, where I also received my MBA. I believe a people-centered approach is essential for a successful Information Security strategy in Higher Ed.

Experience

1. Business Technology Analyst for Information Security and Account Management

   University Of Missouri System

   Dec 2022 — Present · Columbia, MO, US

   IT Security Risk Assessment & Program Leadership• Lead institution-wide information security risk assessments across academic, administrative, and research environments, including cloud, on-prem, and SaaS.• Own and mature the IT security risk management program, aligning risk practices with institutional risk tolerance and shared governance.• Govern the enterprise IT security risk register, documenting inherent and residual risk, mitigation strategies, and executive risk acceptance.Risk Mitigation & Control Effectiveness• Partner with central and distributed IT and research teams to design and implement risk mitigation strategies.• Validate remediation activities and provide assurance that risks are mitigated or formally accepted.Governance, Compliance & Policy• Lead security control assessments aligned with NIST and CIS Controls.• Develop and maintain information security policies, standards, and procedures to support regulatory and institutional compliance.• Support internal and external audits by providing risk documentation, evidence, and control mappings.• Serve as a security advisor to data governance and IT governance committees.Security Awareness & Human Risk Management• Lead the system-wide self-phishing (simulated phishing) program across campuses, medical centers, and administrative units.• Design and execute targeted phishing campaigns addressing emerging threat trends across faculty, staff, researchers, and students.• Analyze campaign data to identify high-risk populations, recurring attack patterns, and training gaps.• Develop metrics and executive dashboards to track reporting rates, failure rates, and risk reduction.• Use phishing outcomes to inform risk assessments, control effectiveness, and security strategy.• Partner with IT, HR, and communications teams to align phishing simulations with security awareness and training initiatives.

Education

• University of Missouri-Columbia

  Master of Business Administration (M.B.A.), Business Administration and Management, General

  2005 — 2007

• Westminster College (MO)

  Bachelors, Psychology and Business

  2000 — 2004

Skills

• Administration
• Advertising
• Event Planning
• Social Networking
• Social Media Measurement
• Social Media Marketing
• Powerpoint
• Training
• Web Content
• Html
• Microsoft Office
• Google Analytics
• Facebook Fan Page Creation
• Web Site Production
• Site Planning
• Microsoft Powerpoint
• Integrated Marketing
• IT Service Management
• Web Marketing
• Student Engagement
• Project Management
• Adobe Creative Suite
• Stakeholder Engagement
• Public Relations
• Marketing
• Google Adwords
• Engagement
• Data Analysis
• Student Development
• Social Media Communications
• Content Strategy
• Community Engagement
• Marketing Strategy
• Public Speaking
• Web Development
• IT Management
• IT Strategy
• Higher Education
• Wordpress
• Social Media