Cloud & App Security Analyst II

Texas Health and Human Services; Austin (TX); On-site; USD 65,000 - 84,000; Full time

Benefits offered by this job

100% paid employee health insurance

Defined benefit pension plan

Generous time off benefits

Career advancement opportunities

Job summary

Texas Health and Human Services seeks a Cybersecurity Analyst II to enhance cloud security, governance, and risk management across our IT environment. You will support both on-premises and cloud configurations, develop SSPs, and maintain GRC artifacts with involvement in ATO processes.

Ideal candidates have 3+ years in information security analysis, familiarity with NIST RMF, and experience delivering security guidance to business partners.

Qualifications

• Graduation from a four-year college with major coursework in information technology security or related field preferred.
• At least 3 years’ experience in information security analysis.
• Education and experience may be substituted for one another on a year for year basis.

Responsibilities

• Perform risk assessments of cloud environments (Azure, AWS) and on-premises systems.
• Assist with development of System Security Plans (SSPs) aligned with NIST RMF and DIR standards.
• Maintain GRC artifacts, POA&Ms, and continuous monitoring evidence; support ATO activities.
• Advise on secure architecture, secure development practices, and cloud configuration requirements.
• Prepare audit documentation, formal reports, and leadership-level reporting.

Skills

Cloud security

Risk assessment

GRC & ATO processes

Audit reporting

Security training

Secure development guidance

Education

Bachelor's degree in IT security or related field

Tools

RSA Archer

Job description

Texas Health and Human Services seeks a Cybersecurity Analyst II to enhance cloud security, governance, and risk management across our IT environment. You will support both on-premises and cloud configurations, develop SSPs, and maintain GRC artifacts with involvement in ATO processes.

Ideal candidates have 3+ years in information security analysis, familiarity with NIST RMF, and experience delivering security guidance to business partners.