Cyber Risk & Vulnerability Analyst

State of South Carolina; South Carolina; On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health, Dental, Vision

30 PTO days equivalent benefits

Paid holidays

State Retirement Plan

Job summary

The State of South Carolina is seeking a Threat and Vulnerability Analyst to enforce security policies, manage audit-related activities, and drive risk remediations within the Agency Administration – Information Security team. You will coordinate security control reviews, maintain risk registers, and work with diverse stakeholders to strengthen SC DSS information systems.

Responsibilities include ongoing security monitoring, incident response planning, and collaboration with development teams to

Qualifications

• Bachelor's degree in information technology systems, computer science, or a related field.
• Minimum of three years in threat and vulnerability analysis or a related cybersecurity field.
• Relevant certifications such as CEH, CISSP, CISA or CompTIA Security+ are desirable.

Responsibilities

• Enforce information security policies and standards and support IT audits.
• Coordinate IT control matrices and annual security control reviews.
• Manage the Cyber Risk register and remediation strategies.
• Monitor security systems, logs, and alerts and report trends and issues.
• Collaborate with cross-functional teams to integrate security in development.
• Coordinate vulnerability assessments and penetration testing with third parties.
• Stay current with security trends, threats, and compliance requirements.
• Assist in incident response planning and execution, including investigations.

Skills

Threat analysis

Vulnerability assessment

Incident response

Security controls

Audit coordination

Documentation

Cross-functional collaboration

Education

Bachelor's degree in IT/CS or related field

Job description

The State of South Carolina is seeking a Threat and Vulnerability Analyst to enforce security policies, manage audit-related activities, and drive risk remediations within the Agency Administration – Information Security team. You will coordinate security control reviews, maintain risk registers, and work with diverse stakeholders to strengthen SC DSS information systems.

Responsibilities include ongoing security monitoring, incident response planning, and collaboration with development teams to