Description

Monitor and advise on information security issues to ensure internal IT security controls are appropriate and operating as intended.

Responsibilities

• Assess the effectiveness of enterprise data security policies, processes, and controls against established standards to identify required improvements.
• Perform gap analyses of security requirements within agency applications according to statutes, regulations, and state policies.
• Conduct risk assessments for specific agencies to identify gaps in security control environments and compliance requirements.
• Serve as a liaison between technical and business audiences to provide guidance on NIST controls and regulatory requirements.
• Mentor and coach team members within the Risk and Compliance Division to improve internal processes.

Required Skills

• 6+ years of experience in IT security and auditing.
• Expert knowledge of NIST controls and risk assessment methodologies.
• Extensive knowledge of security standards including PCI, CJIS, CMS, ISO, SOX, HIPAA, and HITECH.
• Experience performing security assessments and reviews against regulatory requirements.
• Proven ability to communicate complex technical security concepts to non-technical business stakeholders.
• Experience assisting with enterprise risk management processes.
• Ability to work in a customer-facing capacity.

Preferred Skills

• Experience working with Keylight or MiSAP risk assessment processes.
• Experience helping establish Cyber Security Frameworks.

Key Skills

Education

Any Graduate