Information Security Officer (Information Technology Analyst 3 (40 Hour) | Hybrid)

Civicworks; Middletown (CT); Hybrid; USD 115,000 - 150,000; Full time

Job summary

Civicworks in Middletown, CT seeks an Information Security Officer (IT Analyst 3) embedded in the DMHAS IT team to lead security maturity while coordinating with Statewide Cybersecurity Operations.

The role focuses on adopting statewide security platforms, HIPAA/regulatory compliance, incident response, and building security capabilities across enterprise tooling and architectures aligned to statewide benchmarks.

Qualifications

• Considerable knowledge of systems analysis, design, development, and computer programming principles
• Knowledge of information systems security practices, disaster recovery, and IT risk analysis
• Experience with systems security, compliance frameworks (NIST, HIPAA, 42 CFR Part 2), and incident response
• Expertise in network protocols, architecture, and IT infrastructure management
• Project management and cross-functional coordination skills with ability to work as a liaison between technical and business stakeholders

Responsibilities

• Leads security maturity and scaling across the Department of Mental Health and Addiction Services (DMHAS) while embedded within its IT team.
• Coordinates with Connecticut's Statewide Cybersecurity Operations to align DMHAS tooling, architecture, and practices to statewide security benchmarks.

Skills

Systems analysis

Security practices

Disaster recovery

IT risk analysis

Compliance frameworks

NIST HIPAA 42 CFR

Incident response

Network architecture

IT infrastructure

Cross-functional liaison

Job description

The Information Security Officer (IT Analyst 3) leads security maturity and scaling across the Department of Mental Health and Addiction Services (DMHAS) while embedded within its IT team and coordinating with Connecticut's Statewide Cybersecurity Operations. This hybrid role in Middletown, CT serves as DMHAS's system security officer of record, overseeing adoption of statewide security platforms, compliance with HIPAA and regulatory standards, incident response, and security capability building. The position requires close collaboration with enterprise cybersecurity teams to align DMHAS tooling, architecture, and practices to statewide security benchmarks.

Key qualifications:

• Considerable knowledge of systems analysis, design, development, and computer programming principles
• Knowledge of information systems security practices, disaster recovery, and IT risk analysis
• Experience with systems security, compliance frameworks (NIST, HIPAA, 42 CFR Part 2), and incident response
• Expertise in network protocols, architecture, and IT infrastructure management
• Project management and cross-functional coordination skills with ability to work as a liaison between technical and business stakeholders