Description

Manage enterprise risk and ensure information security controls operate as intended across agency systems.

This role is on-site.

Responsibilities

• Assist the Risk and Compliance Division Director with the enterprise risk management process.
• Assess the effectiveness of data security policies, processes, and controls against established standards.
• Perform gap analyses of security requirements within agency applications based on statutes and state policies.
• Conduct risk assessments for specific agencies to identify gaps in security control environments.
• Mentor team members and provide guidance on NIST control interpretations.

Required Skills

• 6+ years of experience in IT security and auditing.
• Expert knowledge of NIST controls and experience performing risk assessments.
• Extensive knowledge of security standards including PCI, CJIS, CMS, ISO, SOX, HIPAA, and HITECH.
• Experience with MiSAP Risk Assessment processes.
• Proficiency using MCS Keylight for risk assessment workflows.
• Strong communication skills to act as a liaison between technical and business audiences.
• Bachelor's degree or equivalent graduate level education.

Preferred Skills

• Ability to coach and train team members to improve internal processes.

Key Skills

Education

Any Graduate