IT Information Security Analyst, Senior

Dakota County

Hastings (MN)

On-site

USD 92,000 - 144,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Medical benefits

Work from home option

Pension with generous employer contrib

Job summary

Dakota County is seeking a Senior Information Security Analyst to set and monitor security standards and protect county assets. You will collaborate with IT management and staff, understand government IT security and privacy law, and communicate effectively with internal and external stakeholders.

This role requires a strong background in information security infrastructure and risk management, with a focus on CJIS/HIPAA/PCI-DSS compliance and security controls.

Qualifications

Bachelor's degree or equivalent in computer science, information systems, or information security with 3 years of IT security experience.
Strong communication skills and ability to work with diverse stakeholders across departments.
Experience with CJIS, HIPAA, IRS 1075, PCI-DSS and security controls.

Responsibilities

Research and monitor security threats, industry trends, and response options.
Recommend improvements to security policies, procedures, and guidelines.
Assess and assist with security access management processes (creation, modification, removal).
Deploy and evaluate encryption, firewalls, authentication, and gateway security controls.
Collaborate on critical security projects to address security requirements throughout projects.

Skills

Information security

Security infrastructure

Policy compliance

Network security

Auditing

Vendor management

Education

Bachelor's degree in CS/IS/InfoSec

Associate degree in CS/IS/InfoSec

Combined 7 years IT security experience

Job description

Who We Are

Dakota County is Minnesota’s third largest county and home to more than 400,000 residents. We strive every day to achieve excellence public service, with a focus on four values: Service, Integrity, People, and Innovation.

Dakota County aims to create an environment that is welcoming and inclusive of diverse people, backgrounds, and experiences. Our goal is to have a workforce that is reflective of the communities and individuals we serve. We promote an equitable and culturally aware work environment where everyone can be their authentic selves.

Information Security Analyst, Senior

The Information Security Analyst, Senior is a high-level technical expert in the security domain and will work with Dakota County Information Technology (I.T.) management and staff to set and monitor Dakota County security standards, best practices, and systems necessary to ensure the protection and confidentiality of County informational assets. This analyst must possess strong technical knowledge of information systems, I.T. security practices and technologies, the use of established I.T. security controls and methods, and a working knowledge of public policy issues and concerns related to government I.T. security and privacy and relevant law. The incumbent must also possess excellent communication skills and the ability to develop and maintain effective interpersonal relationships with Dakota County managers, internal and external technical staff, and representatives of outside governmental agencies.

Bachelor's degree in computer science, information systems, or information security and 3 years' work experience supporting IT security infrastructure;

Associate degree in computer science, information systems, or information security and 5 years' work experience supporting IT security infrastructure;

A combined 7 years of equivalent education and experience in IT security infrastructure.

These examples do not include all possible tasks in this work and do not limit the assignment of related tasks in any position of this classification. Regular attendance according to the position's management approved work schedule is required for all positions.

Preferred Qualifications Beyond Minimum Required

Certified Information Systems Security Professional (CISSP)
CompTIA Advanced Security Practitioner (CASP+)
Certified Security Analyst (CSA)

Key Responsibilities

Research and stay informed of potential information security threats, industry trends, emerging technologies, and response alternatives.
Recommend improvements to county information security policies, procedures, and guidelines.
Assess, monitor, and assist with recommended improvements to county security procedures for user access creation, modification, and removal.
Conduct research and provide insight to identify, assess, and deploy security technology solutions at the county and through vendors, including, but not limited to, encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
Assist with approval, tracking and reporting any security exceptions as the need arises.
Prepare status reports on security matters to analyze security risk and response of vendor security controls.
Monitor and proactively recommend solutions for correcting issues related to security technology performance and capabilities of vendors.
Collaborate on critical technology projects to ensure that security issues are addressed throughout the project life cycle.
Assist with recommendations for security improvements and tool acquisition to County Board and Senior Management.
Assist in the evaluation and use of security technologies and tools.
Provide insight on the deployment of security technology solutions, which may include technology for encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
Work with auditors to demonstrate processes and ensure appropriate levels of access are applied throughout the information and identify lifecycles.
Participate in planning, selection, and implementation of an identity management solution.
Work in an advisory role in application development or acquisition projects to assess security requirements and controls to ensure that security controls are implemented as planned.
Maintain, manage and monitor county compliance with security control frameworks such as the CJIS Security Policy, HIPAA, IRS Tax 1075, PCI-DSS and other state statutes and federal law.
Engage in regular assessment of the current IT security environment to identify weaknesses and work with IT management to develop opportunities for improvements such as reducing complexity, reducing time and cost, and increasing effectiveness.
Serve as a technical subject matter resource providing expertise in the security domain and provide technical direction to lead appropriate work on security related projects.
Lead, facilitate, analyze, execute, govern and represent plans or identified approaches for contracted security assessments, driving remediation through partnering with internal and external business and I.T.
Participate in the assessment of potential threats and risks to County systems and management of those risks.
Weigh business needs against security concerns to articulate issues and recommend options.
Participate in the design, development, and delivery of security training programs and individual classes.
Other duties as assigned.
Knowledge of technological trends and developments in technology relating to security and risk management.
Strong understanding of information security controls, risks and threats,
Understanding of and experience with network protocols including switches, routers and routing technologies.
Strong working knowledge of Microsoft Windows Server environments, VMWare Server, Microsoft M365, Veeam Backup, and other enterprise-wide applications.
Strong knowledge of enterprise security technologies, e.g., Virtual Private Network (VPN), Encryption, Firewalls, Intrusion Detection/Prevention, and Anti-Virus.
Knowledge of information security standards, data privacy laws, computer crime laws, and state and federal data protection laws, etc.
Knowledge of information security audit and assessment methodologies, policies, standards, procedures and best practices.
Ability to conduct risk management assessments; provide assistance in identification, prioritization and remediation of information systems vulnerabilities to diverse users.
Business process and reengineering experience.
Proven knowledge of systems development life cycle methodologies.
Familiarity with national security standards organizations and industry leaders in security excellence.
Ability to work in a flexible environment where requirements and procedures continuously evolve

Personal Attributes

Highly self-motivated and self-directed.
Ability to absorb new ideas and concepts quickly.
Strong analytical and trouble-shooting abilities.
Has a keen attention to detail.
Ability to effectively prioritize and execute tasks in a high-pressure environment.
Ability to make technical decisions with limited resources and precedence.
Very strong customer service orientation.
Strong written, oral, interpersonal, and presentational skills.
Experience working in a team-oriented, collaborative environment.
Ability to use discretion and handle sensitive/confidential information

Work Environment

This position requires extended periods of desk and computer work. Standard hours follow the county business day, Monday through Friday, 8:00 a.m. to 4:30 p.m., with on-call availability as required.

Benefits