Information Security Risk & Compliance Analyst

Illinois Attorney General; Springfield (IL); On-site; USD 65,000 - 90,000; Full time

Job summary

Illinois Attorney General is seeking an Information Security Compliance Analyst to assist in examining IT controls and evaluating system design and effectiveness. The role will document risk exposure, help maintain the IT Risk Register, and track remediation priorities across the organization.

The position involves developing monthly Information Security KPI reports, participating in IT Change Management, and supporting security testing to identify vulnerabilities.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related technical field.
• Minimum of one year of professional IT Auditor experience or related experience.
• Experience with Information Security Frameworks such as NIST CSF or CIS is highly desired.
• Strong written and verbal communication; ability to coordinate and collaborate.

Responsibilities

• Assist with examination of internal IT controls and evaluate design and operational effectiveness of deployed systems.
• Document risk exposure and help maintain IT Risk Register.
• Track remediation commitments and prioritize risks across the organization.
• Develop and publish monthly Information Security KPI and performance metrics.
• Participate in IT Change Management and review/approve system configuration changes.
• Assist with internal and external information security testing to identify vulnerabilities.
• Communicate changes to Information Security policies, practices, and standards.

Skills

IT Auditing

NIST CSF

CIS

Risk assessment

Communication

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related technical field

Job description

Summary of Duties and Responsibilities

Under the direction of the Chief Information Security Officer, the Information Security Compliance Analyst will assist with the examination of internal IT controls, evaluate the design and operational effectiveness of deployed systems and capabilities, document risk exposure, and work collaboratively across the organization to prioritize, draw focus, and track risk remediation commitments. The Information Security Compliance Analyst will help the organization develop and maintain the overall IT Risk Register, and document and track remediation plans and priorities. They will also assist in developing and publishing the monthly Information Security Key Performance
Indicators (KPI) and performance metrics.

The Information Security Compliance Analyst will directly participate in the IT Change Management process and will assist with the review and approval of system configuration changes prior to implementation. In addition to regular audit testing, the Information Security Compliance Analyst will assist with internal and external information security testing processes used to identify network, system, and application vulnerabilities. They will also assist with identified security risks and facilitate the periodic update and communication of changes to the organizations Information Security policies, practices, and standards.

Qualifications

This position requires a Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related technical field and a minimum of one year of professional work experience as an IT Auditor or related experience or an equivalent combination of training, education, and/or experience. Experience and knowledge in applying Information Security Frameworks such NIST CSF or CIS, Data Classification and Privacy concepts is highly desired.

Ability to effectively coordinate, prioritize, and collaborate along with outstanding written and verbal communication skills is required. Attendance and the ability to maintain satisfactory working relationships with OAG employees and the general public is an essential function of this position.

Supplemental Information

Position requires in office attendance.