Information Security Risk & Compliance Analyst

Seminole-Count; Sanford (FL); On-site; USD 70,000 - 105,000; Full time

Job summary

Seminole County is seeking an Information Security Analyst in Florida to establish and maintain security standards aligned with the NIST CSF. The role supports audits, risk assessments, vendor risk reviews, and incident response to safeguard county data and assets.

The position requires a Bachelor's degree in an associated field and at least three years of enterprise IT security experience, with strong communication skills and a proactive security mindset.

Qualifications

• Bachelor's Degree in an associated field and 3+ years' experience in enterprise information security roles.

Responsibilities

• Establish, develop, monitor and maintain information security standards and practices based on the NIST framework.
• Support audits, risk assessments, and vendor risk reviews to ensure compliance and confidentiality, integrity and availability of information assets.
• Implement, monitor, administer and maintain information security standards and technologies to protect enterprise information systems.
• Conduct risk assessments and mitigation planning; assist external audits and regulatory documentation.
• Manage vendor security questionnaires, review third-party risk, and ensure security clauses are included in contracts.
• Deliver security awareness training and create educational materials for employees and stakeholders.
• Review, test compliance and recommend remediation for security practices, policies and procedures.
• Promote security culture and coordinate incident response and remediation efforts.

Skills

Information security

NIST CSF

Risk assessment

Vendor risk

Security awareness

Compliance

Education

Bachelor's degree

Job description

Seminole County is seeking an Information Security Analyst in Florida to establish and maintain security standards aligned with the NIST CSF. The role supports audits, risk assessments, vendor risk reviews, and incident response to safeguard county data and assets.

The position requires a Bachelor's degree in an associated field and at least three years of enterprise IT security experience, with strong communication skills and a proactive security mindset.