Description

You will monitor and advise on information security issues to ensure internal IT security controls are appropriate and operating as intended.

Responsibilities

• Assist the Cyber Security, Risk and Compliance Division Director with the enterprise risk management process.
• Assess the effectiveness of data security policies, processes, and controls against established standards to identify required improvements.
• Perform gap analyses of security requirements within agency applications according to statutes, regulations, and policies.
• Provide guidance to agency staff on the interpretation of NIST controls and other regulatory requirements.

Required Skills

• 6 or more years of experience in IT security and audit.
• Expert knowledge of NIST controls and risk assessment methodologies.
• Extensive knowledge of security standards including PCI, CJIS, CMS, ISO, SOX, HIPAA, and HITECH.
• Proven experience performing security assessments and reviews.
• Ability to act as a liaison between technical and business audiences in a customer-facing capacity.
• Strong communication skills for coaching and training team members.
• Experience with the MiSAP risk assessment process or Keylight systems.

Preferred Skills

• Act as a subject matter expert to lead and mentor team members within the Risk and Compliance Division.
• Support the State of Michigan risk assessment process and assist with establishing the Cyber Security Framework.

Key Skills

Education

ANY GRADUATE