Description

You will monitor and advise on information security issues to ensure internal IT security controls operate as intended.

Responsibilities

• Assess the effectiveness of enterprise data security policies, processes, and controls against established standards to identify required improvements.
• Perform gap analyses of security requirements within agency applications according to statutes, regulations, and state policies.
• Execute risk assessments and assist with the enterprise risk management process using Keylight and MiSAP.
• Act as a liaison between technical and business audiences to provide guidance on NIST controls and regulatory requirements.
• Mentor and coach team members to improve division processes and security frameworks.

Required Skills

• 6+ years of experience in IT security and audit.
• Expert knowledge of NIST controls and risk assessment methodologies.
• Extensive knowledge of PCI, CJIS, CMS, ISO, SOX, HIPAA, and HITECH standards.
• Proven ability to perform security assessments and reviews.
• Strong communication skills for customer-facing technical and business liaison work.
• Bachelor’s Degree.

Key Skills

Education

Bachelor’s Degree