Senior Cybersecurity Risk & Compliance Analyst 23-E-48

Summary Of Duties And Responsibilities

• Ensure organization’s adherence to cybersecurity standards
• Avoidance of cybersecurity risks
• Implementation of appropriate controls
• Leading and managing cybersecurity compliance initiatives
• Developing and maintaining cybersecurity policies and procedures
• Conducting audits and assessments
• Collaborating with stakeholders to develop a risk management framework
• Maintaining accurate documentation
• Supporting security awareness initiatives
• Conducting training sessions
• Providing guidance on secure data handling and compliance-related matters

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related field
• Minimum of 5 years work experience in cybersecurity compliance, risk assessment, and third-party risk management
• Relevant certifications such as CISA, CISSP, CISM, or CRISC are highly desirable
• Strong knowledge and experience with SOC2 reviews, NIST CSF, NIST 800-53, and other relevant frameworks
• Familiarity with industry-specific compliance standards such as HIPAA, CJIS and IRS 1075 is a plus
• Experience in conducting 3rd-party risk reviews, IT controls assessments, cybersecurity policy compliance reviews, vulnerability assessments and end-user training
• Significant knowledge of security technologies, best practices, and emerging trends
• Strong analytical and problem-solving skills
• Effective coordination, prioritization, and collaboration
• Outstanding communication skills to present complex information in a clear and concise manner
• Attendance and maintenance of satisfactory working relationships with OAG employees and the general public

Pay

• Complete benefits package including health care, dental, vision, retirement, deferred compensation plans, flexible spending accounts, life insurance, long-term disability, holidays, vacation, and sick leave
• Pro-rated benefits for part-time employees working an average of 20 hours per week over the course of a year

Schedule

• Full-time employees receive a complete benefits package
• Part-time employees receive benefits on a pro-rated basis