IN-DCS Info Security Analyst

About the role

A resource will work as an Information Security Analyst responsible for auditing and monitoring systems containing confidential information. This position also involves helping the organization manage its risks by monitoring IT systems for inefficiencies, inaccuracies, mismanagement, etc.

Responsibilities

• Maintains awareness of information security and confidentiality conditions, including problem areas and recommended enhancements; reports these to the supervisor.
• Communicates with user customers to understand their security needs and implements procedures to accommodate them, including training and assessment.
• Assists with preparing for security audits (e.g., IRS, SSA, OCSE, FBI, SBOA), and remediates any findings; creates and submits relevant reports.
• Develops information security policies and standards for protecting information systems in compliance with state and federal requirements.
• Creates Standard Operating Procedures (SOP) for implementing security policies.
• Recommends appropriate security safeguards for new and legacy systems.
• Ensures efficient use of computer hardware and software features to secure automated systems and associated data.
• Develops and implements procedures for using information security management software.
• Suggests improvements to information security software.
• Performs periodic audits to ensure that security policies and standards are being followed and are effective.
• Generates recommendations for enhancements and prepares reports as necessary.
• Stays updated on new laws and changes affecting privacy standards, network security, cloud security, remote access, and physical security.
• Mentors and provides guidance to new or other staff as needed.
• Performs related duties as assigned.
• Supports other tasks as assigned.

Requirements

• Thorough knowledge of information security management tools, policies, and standards.
• Thorough knowledge of state and federal legislation and regulatory laws pertaining to information system security and privacy.
• Knowledge of software vulnerabilities, vulnerabilities scanning tools, and remediation methods.
• Familiarity with domain structures, user authentication, and digital signatures.
• Ability to develop and maintain information security standards.
• Ability to understand and apply complex computer logic.
• Effective communication skills, both oral and written.
• Teamwork and leadership skills, depending on the situation.
• Prioritization and organizational skills.

Qualifications

• Information security or technology degree preferred.
• Security certification preferred (e.g., CISSP).
• Network administration experience preferred.

Skills

• Thorough knowledge of information security management tools, policies, and standards.
• Thorough knowledge of state and federal legislation and regulatory laws pertaining to information system security and privacy.
• Knowledge of software vulnerabilities, vulnerabilities scanning tools, and remediation methods.
• Familiarity with domain structures, user authentication, and digital signatures.
• Ability to develop and maintain information security standards.
• Ability to understand and apply complex computer logic.
• Effective communication skills, both oral and written.
• Teamwork and leadership skills, depending on the situation.
• Prioritization and organizational skills.

Benefits

N/A

Pay

N/A

Schedule

N/A