Information Security GRC Systems Analyst

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real content. We need to parse the posting. First, we have "Position Description About Harris County and Universal Services:" then description of Universal Services, Harris County, etc. That's about the organization and role context. Could be "About the role" or "About the organization". The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have "About the role" heading and include the description about Harris County and Universal Services and position overview. Then "Position Overview:" is a paragraph describing the role. Could be part of About the role. Then "Duties and Responsibilities:" list of duties. Use

• . Then "Requirements" heading: includes Education and Knowledge, Skills, and Abilities. Also "Preferences" maybe under Qualifications or Skills? The instruction: we can have Qualifications, Skills sections. We need to decide. We have "Education: Minimum: High School diploma or G.E.D." That's a requirement. Then "Knowledge, Skills, and Abilities:" list bullet-like sentences. Then "Preferences" list: Bachelor's degree, experience consulting, proficiency with GRC tools, familiarity with productivity platforms. We could put Education under Requirements, Knowledge, Skills, and Abilities under Skills, Preferences under Qualifications maybe. But we need to avoid filler sections like Benefits, Pay, Schedule if not present. The posting does not mention benefits, pay, schedule explicitly. It mentions "Work Arrangement: Hybrid". That's schedule? It's work arrangement. Could be considered Schedule? The instruction: include Schedule section only if posting actually states them. It states "Work Arrangement: Hybrid". That's about schedule/hybrid. Could be considered Schedule. But we need to see if we should include a Schedule heading with that content. The instruction: "never create Pay/Schedule/Benefits sections unless the posting actually states them." It does state Work Arrangement: Hybrid. So we could include a Schedule section with that detail. Also "General Information Location: 406 Caroline St., Houston, TX 77002". That's location; could be part of About the role or separate? Not a standard heading; we could include under About the role. Also "Employment may be contingent on passing a drug screen and meeting other standards." That's a condition; could be part of Requirements? Might be considered a requirement. Could be included under Requirements as a note. Also "Due to a high volume of applications positions may close prior to the advertised closing date or at the discretion of the Hiring Department." That's boilerplate; we should remove. We must remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So remove the EEO link, accommodation line, criminal history check lines? The criminal history check is relevant to requirements? It says "This position is subject to a criminal history check. Only relevant convictions will be considered..." That's a requirement/condition; we might keep it as part of Requirements? It's not exactly a qualification but a condition. The instruction says preserve ALL substantive information; do not invent or summarize away detail. So we should keep that info, but we need to place it somewhere appropriate. Could be under Requirements as a note. Also "Automatic Disqualification: Convictions, probation, or deferred adjudication for any Felony, and any Class A Misdemeanor Convictions, probation, or deferred adjudication for a Class B Misdemeanor, if within the previous 10 years Open arrest for any criminal offense (Felony or Misdemeanor) Family Violence conviction". That's also part of criminal background check details. Keep. Also "NOTE: Qualifying education, experience, knowledge and skills must be documented on your job application. You may attach a resume to the application as supporting documentation but ONLY information stated on the application will be used for consideration. "See Resume" will not be accepted for qualifications." That's application instruction; we should remove. Also "Preferences" section we keep. Now we need to decide headings. Potential sections: - About the role (includes description of Harris County, Universal Services, position overview, location, work arrangement maybe) - Responsibilities (duties) - Requirements (education, criminal background check, drug screen, etc.) - Skills (knowledge, skills, abilities) - Qualifications (preferences: bachelor's degree, experience consulting, GRC tools proficiency, familiarity with productivity platforms) - Schedule (Work Arrangement: Hybrid) maybe. But we need to avoid thin sections. Could combine Qualifications and Skills? But instruction says prefer a few substantive sections over many thin ones. We have enough content for each. Let's craft:

  About the role

  Harris County Universal Services is transforming the way the County does business and seeking an Information Security GRC Systems Analyst to join our team. Universal Services is the enterprise IT solutions center for the departments and offices of Harris County, providing Information Technology, Public Safety and Justice Technologies, 311 Constituent Engagement Services, Fleet Services, and Records and Information Governance Services. Harris County is the third largest and most diverse county in the nation, with a population of more than 4.7 million. Harris County Commissioners Court, the County’s governing body, directs a budget of more than $4 billion providing essential services including flood control, infrastructure, healthcare, housing, and justice administration. This is a great time to join Universal Services as we enhance critical services to Harris County residents and internal customers. The Information Security Analyst – Governance, Risk & Compliance (GRC) performs all procedures necessary to ensure the security of information and information systems, protecting systems from intentional or inadvertent access, alteration, or destruction. Location: 406 Caroline St., Houston, TX 77002. Work Arrangement: Hybrid.

  That covers about role, overview, location, work arrangement. Then Responsibilities:

  Responsibilities

  • Serve as a subject matter expert and/or provide direction on processes, projects, and issues related to Cloud Security, with emphasis on Microsoft Azure.
  • Conduct security risk assessments for cloud, hybrid, and on-premise IT solutions and infrastructure.
  • Utilize cloud security controls to enhance security posture and research emerging threats affecting cloud and hybrid cloud environments.
  • Develop, manage, and coordinate security risk assessments for third-party vendors and internally developed/managed applications and systems, ensuring alignment with the Confidentiality, Integrity, and Availability (CIA) triad.
  • Assess and prioritize information security risk; facilitate compliance with regulatory requirements and internal security policies.
  • Plan, research, and evaluate cybersecurity architecture for infrastructure projects (cloud and on-premise).
  • Identify security design gaps in proposed architectures and recommend improvements.
  • Lead the evaluation, design, and implementation of new security solutions and technologies.
  • Develop and maintain IT security policies, standards, procedures, and guidelines, including exception management processes.
  • Create policy drafts, procedures, educational content, strategy/technology roadmaps, metrics packages, RFPs/RFOs, project plans, communications, and executive-level presentations.
  • Design and implement tools/processes to monitor and govern security control effectiveness.
  • Maintain dashboards and reports to communicate security risks and compliance status.
  • Present cybersecurity risks and remediation plans to stakeholders; track and ensure timely closure of open issues.
  • Participate in ongoing updates and management of the Harris County Cybersecurity Framework and cybersecurity policies.
  • Balance business needs with security priorities and communicate risk effectively to leadership.
  • Evaluate and assist with the adoption of emerging security tools and solutions.
  • Lead or serve as a subject matter expert on complex, multi-disciplinary security projects.
  • Coach and mentor junior managerial and technical staff.
  • Conduct cybersecurity training and awareness sessions as needed.
  • Perform other duties as assigned.
  Then Requirements:

  Requirements

  • Education: Minimum: High School diploma or G.E.D. from an accredited educational institution.
  • This position is subject to a criminal history check. Only relevant convictions will be considered and, even when considered, may not automatically disqualify the candidate.
  • Automatic Disqualification: Convictions, probation, or deferred adjudication for any Felony, and any Class A Misdemeanor Convictions, probation, or deferred adjudication for a Class B Misdemeanor, if within the previous 10 years. Open arrest for any criminal offense (Felony or Misdemeanor). Family Violence conviction.
  • Employment may be contingent on passing a drug screen and meeting other standards.
  But we also have Knowledge, Skills, and Abilities list. That could be Skills section.

  Skills

  • Strong interpersonal and communication skills; able to build collaborative relationships across departments.
  • Ability to analyze complex problems, assess risk, and recommend effective, business-aligned solutions.
  • A self-starter with passion for cybersecurity, adaptability, and a team-oriented approach.
  • Working knowledge of security regulations such as CJIS, HIPAA, PCI-DSS, and Privacy Act.
  • Experience mentoring others and conducting security training sessions.
  Then Qualifications (Preferences):

  Qualifications

  • Bachelor’s degree in Information Technology, Cybersecurity, or related field.
  • Experience consulting with stakeholders on security best practices, network controls, and regulatory requirements.
  • Proficiency with Governance, Risk & Compliance (GRC) tools.
  • Familiarity with productivity platforms such as Microsoft 365 (Word, Excel, PowerPoint, Outlook), Teams, SharePoint, QuickBase, and Power BI.
  We could also include Schedule section if we want, but we already included Work Arrangement in About the role. Could also make a separate Schedule heading with "Hybrid". But we already placed it there; that's fine. We must not repeat job title as heading. We didn't. We must not put Job ID/requisition numbers as headings; none present. We must output only HTML fragment. Check for any leftover boilerplate: we removed EEO link, accommodation line, criminal history check lines? We kept them in Requirements. That's okay. We removed "If you need special services or accommodations, please call..." etc. Good. We removed "This position is subject to a criminal history check." we kept but rephrased? We kept as is. We removed "Only relevant convictions will be considered and, even when considered, may not automatically disqualify the candidate." kept. We removed "Applicants for this position will be subject to a criminal background check that includes being fingerprinted. This applies to any position with network access to Criminal Justice Information Services (CJIS) or access to an area where CJIS is received, maintained or stored either manually or electronically (i.e. custodian, maintenance)." That's more detail about criminal background check; we might want to keep that as it's substantive. It's about the nature of the check. We could include it in Requirements as another bullet. We also removed "Automatic Disqualification: Convictions, probation, or deferred adjudication for any Felony, and any Class A Misdemeanor Convictions, probation, or deferred adjudication for a Class B Misdemeanor, if within the previous 10 years Open arrest for any criminal offense (Felony or Misdemeanor) Family Violence conviction". We kept but need to format properly. We also removed "NOTE: Qualifying education, experience, knowledge and skills must be documented on your job application..." etc. We removed "Due to a