Information Systems Advisor 3 – Security and Compliance Administrator

Metropolitan Government of Nashville & Davidson County; Nashville (TN); In loco; USD 90.000 - 140.000; Tempo pieno

Descrizione del lavoro

Metropolitan Government of Nashville & Davidson County seeks a Security and Compliance Administrator to develop and enforce security policies, conduct vulnerability assessments, and implement safeguards protecting the Courts’ core operations.

The role requires strong cybersecurity knowledge, proactive mindset, and experience with HIPAA, CJIS, FERPA, PCI-DSS, and related frameworks. Responsibilities include audits, training, incident response, and budget tracking.

Competenze

• Bachelor’s degree in Computer Science, Information Security, or related field with three years of IT security experience.
• Experience with application penetration testing is a plus.
• Experience with government compliance frameworks such as CJIS, HIPAA, or FISMA.
• Additional relevant certifications encouraged (e.g., CISSP, CISA, CISM) from recognized bodies.

Mansioni

• Develop and enforce security policies for core systems and data.
• Perform vulnerability assessments and ensure timely remediation.
• Monitor systems for suspicious activity and investigate incidents.
• Manage role-based access controls and user provisioning/deprovisioning.
• Prepare compliance reports and maintain documentation for audits.
• Deliver security training to staff and awareness programs.
• Collaborate with stakeholders to address compliance issues.
• Lead incident response efforts and document communications.
• Track information security budget and expenditures.

Conoscenze

Cybersecurity best practices

HIPAA

CJIS

FERPA

PCI-DSS

Vulnerability assessments

Security monitoring

RBAC access control

Incident response

Documentation

Audits & compliance

Formazione

Bachelor’s degree in Computer Science / Information Security

Strumenti

SIEM

IDS/IPS

Firewalls

Descrizione del lavoro

This is a Non-Civil service position located within the Justice Integration Services Department. The Security and Compliance Administrator will be responsible for developing and enforcing security policies, performing vulnerability assessments, and implementing security measures to protect systems that run the core operations of the Courts in Metro Nashville and Davidson County. This role requires a candidate with a strong understanding of cybersecurity best practices and a proactive mindset.

• Ensure adherence to regulations like HIPAA, CJIS, FERPA, PCI-DSS, or other applicable frameworks.
• Security Monitoring and Risk Management
• Conduct routine audits and vulnerability assessments
• Monitor systems for suspicious activity and investigate incidents
• Manage role-based access controls and user provisioning/deprovisioning.
• Compliance Reporting and Documentation
• Prepare reports for internal/external audits and regulatory bodies
• Maintain logs and documentation for compliance reviews
• Develop and deliver employee training on security best practices and data handling
• Collaborate with appropriate entities to address compliance issues
• Incident Response
• Respond to and investigate security incidents
• Assist with or lead response efforts for security breaches, including documentation and communication
• Tracking information security budget

Bachelor’s degree in Computer Science, Information Security, or related field and three (3) years of experience in IT security or a related role.

*Additional experience may be considered in lieu of education.*

LICENSES REQUIRED

• CompTIA Security+
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)

NOTE: Only one or more of the listed licenses/certifications are required.

Candidates with accreditations earned in a foreign institute are encouraged to apply.

Note: Per Metro Ordinance No. SO94-1078. All employees of the Metropolitan Government shall be residents of the State of Tennessee or become residents of the state within six (6) months of employment as a prerequisite to employment with the Metropolitan Government.

• Experience with the implementation of application penetration testing
• Experience with compliance in regulated environments with an understanding of government compliance frameworks, including but not limited to CJIS, HIPAA, or FISMA
• Additional relevant certifications (e.g., Microsoft Certified: Security, Compliance, and Identity Fundamentals)
• Experience with frameworks like NIST CSF, ISO/IEC 27001:2022, COBIT, or CIS Controls
• Strong knowledge of security best practices for Windows, Linux, and Microsoft 365
• Experience with security tools (e.g., SIEM, IDS/IPS, firewalls)
• Strong knowledge of security protocols, cryptography, authentication, and authorization
• Experience with developing and testing disaster recovery plans
• Experience with developing and testing incident response plans
• Experience with vendor risk management
• Ability to analyze trends in security incidents and propose improvements
• Excellent analytical and problem-solving skills
• Strong documentation skills

We are an equal opportunity employer. All individuals, regardless of personal characteristics, are encouraged to apply. Metro Nashville is committed to selecting the most qualified candidate for each of our roles.

Metro Nashville Government respects the religious beliefs and practices of all employees and will make, on request, an accommodation for such observances when a reasonable accommodation is available that does not create an undue hardship on business operations.

Requests for ADA or other protected accommodations for the recruitment process should be directed to Human Resources at 615-862-6640.