Security Analyst

Scope of the project

The division of information security is tasked with ensuring compliance with state guidelines.

This position will be performing those services including

• Supporting agencies during their development of the information security program with direct tactical implementation assistance.
• Developing and tracking agency information security implementation plans
• Interviewing administrators, managers, and third parties to aid in development of program artifacts
• Ensuring high-level assessments of agencies infosec work to ensure progress is made
• Providing high-level analysis of process and procedures work to ensure compliance with state standards

Daily duties / responsibilities

This implementation assistance would include, but is not limited to:

• Interviewing business and technical owners to determine policies and procedures used for each agency process
• Developing and tracking infosec implementation plan progress
• Documenting information gathered during both interviews and document reviews to assist with developing formal process and procedures
• Assessing agency documentation to ensure adequate approaches are used to comply with controls
• Facilitating agency status reporting
• Collaborating with agencies to provide recommendations for compliance

required education/certifications

10+ years of experience in information security and compliance experience

certifications

CISA or CISSP or CISM or GSLC or equivalent

Required skills (rank in order of importance)

• Have completed an information security plan or system security plan workbook
• Prior experience working with fisma standards
• Must have a strong working knowledge of NIST 800-53
• Prior experience POA&M or CAP
• Strong communication experience

Preferred skills (rank in order of importance)

• Simultaneously manage multiple Infosec work efforts
• Strong schedule management and resource planning skills
• Ability to work at a high-volume and fast pace
• Strong collaborator and strong ability to meet deadlines
• Knowledge of IRS 1075, HIPAA, CJIS, MARS-E, and/or PCI-DSS
• Ability to identify, map, and re-engineer business processes

All your information will be kept confidential according to EEO guidelines.