Description

Manage enterprise risk assessments and ensure compliance with state and federal security standards.

Responsibilities

• Assist the Director with the enterprise risk management process and Cyber Security Framework establishment.
• Assess data security policies, processes, and controls against established guidelines to identify improvements.
• Perform gap analyses on agency applications to ensure compliance with security statutes and state policies.
• Act as a liaison between technical teams and business audiences in a customer-facing capacity.
• Mentor and coach team members to improve internal risk and compliance processes.

Required Skills

• 6+ years of experience in IT security and audit.
• Expert knowledge of NIST controls and risk assessment methodologies.
• Extensive knowledge of PCI, CJIS, CMS, ISO, SOX, HIPAA, and HITECH standards.
• Experience performing security assessments and reviews.
• Ability to interpret security statutory and regulatory requirements for agency staff.
• Experience with Keylight system and MiSAP risk assessment processes.
• Strong communication skills for bridging technical and business requirements.

Key Skills

Education

Any Gradute