Responsibilities:
- Discuss, explain, and document how the various systems meet or do not meet the assigned controls and how the control is being remediated if applicable; document and present exception requests as needed
- Review security assessment reports and assist with completing Plan Of Action & Milestone reports
- Independently lead working sessions & present/explain technical information with assigned team of both technical and non-technical individuals
- Responsible for continual improvements of system security plan process, provide technical guidance and support as needed
- Act as liaison between department stakeholders regarding system security assessment process
- Responsible for data Input and data oversight into GRC tool for assigned application system security plans
- Work with management on strategies for annual system security and risk plan development
- Follow IT security technical architecture design methodology and best practices
- Provide technical system security expertise as it relates to the integration of systems, security, middleware, services, database design, hardware/server, and tools, to IT project business and technical requirement sessions and for system implementation
- Lead and coordinate with other technical resources in the overall system design, implementation and integration of systems with other existing systems/technologies/data sources on multiple platforms within the agency, across multiple state agencies, Enterprise Architecture and multiple software vendors as required
- Provide expertise for adherence to Payment Card Industry (PCI) Data Security Standards (DSS), IRS Publication 1075 regulations, and IRS Safeguards Computer Security Evaluation Matrices (SCSEMs)
- Technical Documentation/Responses to address system security program requirements
- Providing input for Disaster Recovery testing and processes.
Experience:
- Prefer minimum of 5 years of experience in enterprise class IT Security Analysis
- Strong understanding of NIST framework
- Excellent communication and presentation skills
- Independent, self-starter willing to take ownership of the process & lead others
- Bachelor’s Degree Required and/or 2-year degree with Security certifications
- Must be able to work onsite in office 2x a week for hybrid model