IT PROFESSIONAL 3 - INFORMATION SECURITY

State-of-Nevad; Nevada (IA); On-site; USD 110,000 - 160,000; Full time

Job summary

Aging and Disability Services Division in Nevada seeks an IT Professional 3 to lead its security program from Las Vegas, Carson City, or Reno. The role oversees the IT Security Team, develops security policies, and coordinates with HIPAA/CIS Controls compliance.

The incumbent will manage security across VMware vSphere, AD, SIEM, MFA and cloud apps, while guiding staff and ensuring safe, compliant operations. Requires a bachelor’s degree and relevant IT security experience.

Qualifications

• Bachelor's degree in computer science, MIS or closely related field and three years of professional IT experience relevant to the duties of the position.
• Experience in information security, policy development, and security operations is required.

Responsibilities

• Serve as the Department Information Security Officer and senior security authority under the IT Chief.
• Provide leadership over the department’s security program and supervise the IT Security Team.
• Develop and maintain access control, backup and disaster recovery practices, and monitoring/logging strategies.
• Lead incident response processes and hardening baselines for servers, desktops, and M365 environments.
• Guide staff, develop security policies, and drive alignment with HIPAA, CIS Controls, and state/federal regulations.

Skills

Security leadership

Information security

Policy development

Team supervision

Incident response

VMware vSphere

Active Directory

SIEM

Networking (Meraki/Cisco)

HIPAA compliance

Education

Bachelor's degree in computer science or information systems

3+ years professional IT experience including information security

Tools

Meraki/Cisco networking

Office 365 security features

MFA

SIEM tools

Job description

Aging and Disability Services Division is recruiting for an IT Professional 3 in Las Vegas, Carson City or Reno Nevada. This recruitment may be used to fill current and future vacancies as they occur in the following program: Information Technology (IT). This position serves as the Department Information Security Officer and functions as the senior security authority under the IT Chief. The role provides leadership over the department’s security program and supervises the IT Security Team. The incumbent will help build, standardize, and mature the department’s security capabilities while supporting modernization efforts across systems and platforms. They will work with technologies and domains including VMware vSphere, Hyper V, Active Directory, firewalls, endpoint security, MDM, MFA, SIEM tools, Meraki/Cisco networking, Office 365 security features, and agency cloud applications. They’re responsible for developing and maintaining access control structures, backup and disaster recovery practices, monitoring and logging strategies, incident response processes, and hardening baselines for servers, desktops, and M365 environments. This position requires the ability to work independently, exercise sound technical and security judgment, and lead staff in both operational and strategic tasks. The position supervises one ITP2 and one ITT6 positions within security. Candidates should be comfortable developing security policies, implementing best practices, guiding staff, and driving departmental alignment with HIPAA, CIS Controls and other State/Federal regulations. ADSD fosters a positive, inclusive, and diverse work environment that values innovation, teamwork, and collaboration. The mission of ADSD is to empower individuals and their support systems by providing resources for disabilities and aging - connecting Nevadans to services and improving their quality of life.

Information Technology (IT) Professionals analyze, develop, implement, maintain, and modify computer operations, systems, networks, databases, applications, and/or information security. Incumbents may perform duties in one or more IT specialization areas depending on the needs of the agency.

Bachelor's degree from an accredited college or university in computer science, management information systems, or closely related field and three years of professional IT experience relevant to the duties of the position which may include computer operations, systems administration, network administration, database administration, applications analysis and development, and/or information security, one year of which was at the journey level; OR one year of relevant experience as an IT Professional II in Nevada State service; OR an equivalent combination of education and experience as described above.

Conduct detailed alternative analyses and determine end-user requirements through consultation with end-users, technicians, vendors, management, and others.

Maintain documentation related to the assigned IT specialization’s architecture, operations, and other records of work activities as required.

Maintain current knowledge of technological trends and advancements in the IT field as well as security management practices, laws, policies, and ethics.

Participate in recommending and justifying resource allocations and expenditure decisions, tracking, and recording expenditures, preparing purchase requests, and writing technical requirements for grant proposals.

Perform related duties as assigned.

Under general direction, incumbents perform advanced journey level duties and may train, supervise, and evaluate the performance of subordinate staff and/or serve as a project leader as assigned. Incumbents may function as a unit leader to include directing the activities of a branch IT support unit, overseeing projects of limited scope, and coordinating activities with other work groups. This is a supervisory level for Computer Operations and the journey level for Information Security positions.

This job specification lists the major knowledge, skills and abilities of the job and is not all inclusive. Incumbent(s) will be expected to have knowledge, skills and abilities from a previous level.

Computer Operations

• Detailed knowledge of:basic elements of programming in order to generate all required reports and special projects as required of the data processing section; computer operating system including all functions, schedules, workflows, and processes; data communication networks; principles of operation, capabilities and limitations of a computer system and related environmental equipment in order to efficiently and effectively produce the final work product; supervisory principles and techniques.
• Working knowledge of: diagnostic procedures as needed in verifying systems; principles of operation, capabilities and limitations of a computer system and related equipment to produce the final work product efficiently and effectively; the principles of operation, capabilities and limitations of a multi-programming computer system and related equipment.
• General knowledge of:computer programming documentation techniques as needed in setting up and verifying systems programs.
• Ability to: analyze and develop current and proposed computer operation procedures for efficient and effective operations; anticipate changes and new directions within the data processing environment; plan, organize and direct a twenty-four hour, seven-day-a-week shift operation of a computer system; understand and apply technical manuals, environmental requirements and physical planning.

Systems Administration

• Detailed knowledge of: Some positions require knowledge of specific departmental information systems.
• Working knowledge of: principles of designing test procedures; principles, practices, and procedures required to design, analyze, and maintain software; principles, tools, and techniques as applied to writing and modifying programs; systems programming languages and techniques.
• General knowledge of:capacity planning techniques; performance monitoring principles and related software products; telecommunication technology and related systems software; various systems software products and their interrelationships; vendor procedures for applying maintenance and temporary fixes.
• Ability to: communicate effectively orally and in writing; evaluate and tailor information system hardware and/or software to meet local requirements; implement auxiliary software and subsystems; maintain effective working relationships with others; provide mid-level technical consultation and training; recommend and implement system changes.
• Skill in: implementing changes to a variety of networking systems; managing large volumes of data on various storage media.

Network Administration

• Detailed knowledge of:directory services; network operating systems; network problem troubleshooting; concepts, characteristics, and capabilities of network based applications; current and emerging trends in developing computer networking technology; principles and practices of data backup and recovery; the principles, practices, and techniques used to install, maintain, and support LANs and wide area networks (WANs); computer network communication protocols; the concepts, characteristics, and capabilities of computer operating systems.
• Working knowledge of: the methodology for implementing distributed applications; network authentication; data storage networks; network security design and implementation; network communications hardware such as routers, switches, and firewalls; systems integration and optimization; virtual private networks and virtual LANs.
• Ability to:recommend hardware to solve network issues; verify router configuration and optimize routes; perform cost/benefit analysis; present network design concepts to management and users; integrate servers into a geographically dispersed network; participate in vendor interaction and verify that requirements are met; verify efficient interconnectivity of distributed applications; verify network capacity and provide utilization statistics; configure and upgrade data storage networks; solve network problems; interpret technical manuals.

Database Administration

• Detailed knowledge of: physical and logical database structure and design; database backup and recovery scenarios and methodologies; database security management and data integrity.
• Working knowledge of:computer and network operating systems, computer hardware, and communications systems; database and operating system performance tuning monitoring; business practices and procedures; customer service standards and procedures; business software, systems analysis, systems design, system development lifecycle, and information architecture to effectively design and create databases; structured query language.
• Ability to: coordinate system design, applications and software programming, and computer operations activities relative to the database environment.

Applications Analysis and Development

• Detailed knowledge of: basic programming techniques such as table handling and on-line file updates; general purpose programming languages (in software-oriented positions); principles, tools and techniques as applied to writing, modifying, and documenting programs; techniques of diagramming program flow.
• Working knowledge of: access methods and file structures; at least one formal systems design methodology; principles of designing test procedures; principles, practices and procedures required to develop, design, and implement information system-based solutions in a wide range of problem domains.
• General knowledge of: project control techniques, including cost estimating and resource scheduling.
• Ability to:utilize interactive programming techniques; logically analyze problems of considerable complexity; test and validate information systems.

Information Security

• Working knowledge of:three of the ten security domains; current principles, theories, practices, and procedures of information security management.
• General knowledge of: general-purpose security controls; current information security trends and technologies.
• Ability to: develop plans to safeguard against accidental or unauthorized modification, destruction or disclosure of data to meet security needs; assess costs and present alternatives for the assigned area of responsibility; participate in long-term projects and strategic planning; organize resources and materials in order to meet project timelines; assess the security and/or vulnerability of information assets to assist in developing a risk assessment; analyze data, solve problems and make appropriate decisions within three of the ten domains; provide effective and responsive customer service; establish and maintain positive working relationships with others; develop and implement information security training materials and workshops.
• Skill in: technical writing, report preparation and oral communication.