Description

You will manage information security issues and audit internal IT security controls to ensure they operate as intended.

Responsibilities

• Assess the effectiveness of enterprise data security policies, processes, and controls against established standards to identify required improvements.
• Perform gap analyses of security requirements within agency applications according to statutes, regulations, and state policies.
• Conduct risk assessments for agencies to identify gaps in security control environments and compliance requirements.
• Act as a liaison between technical and business audiences to provide guidance on NIST controls and regulatory requirements.
• Mentor and coach team members to improve division processes and support enterprise risk management.

Required Skills

• 6+ years of experience in IT security and auditing.
• Expert knowledge of NIST controls and risk assessment methodologies.
• Extensive knowledge of security standards including PCI, CJIS, CMS, ISO, SOX, HIPAA, and HITECH.
• Proven ability to perform security assessments and compliance reviews.
• Strong communication skills for customer-facing roles and bridging technical-to-business gaps.
• Experience assisting with enterprise risk management processes.
• Ability to interpret security statutory and regulatory requirements.

Preferred Skills

• Experience working with Keylight or MiSAP risk assessment processes.
• Experience establishing Cyber Security Frameworks.

Key Skills

Education

Any Graduate