IT SECURITY ANALYST I

State of Arkansas; Little Rock, Northern (AR, KY); Hybrid; USD 66,000 - 108,000; Full time

Job summary

Office of Arkansas Lottery is seeking an IT Security Analyst I to safeguard agency systems, monitor networks, and ensure data confidentiality in line with state and federal regulations.

The role involves firewall management, vulnerability identification, incident response, and contributing to cybersecurity strategy within the IT department. A Bachelor's degree in IT/CS/Cybersecurity and relevant experience are required.

Qualifications

• Bachelor's degree in information technology, cybersecurity, computer science, or related field.
• Familiarity with regulatory requirements and frameworks such as GDPR or PCI DSS.
• Strong understanding of network protocols, operating systems, and cloud security principles.

Responsibilities

• Monitor security systems and network activity for threats.
• Perform vulnerability assessments and assist in incident response.
• Investigate and document security incidents and breaches.
• Develop and implement security policies and procedures.
• Collaborate with IT teams to ensure secure configurations.

Skills

Network security

Cloud security

Operating systems

Regulatory compliance

Communication skills

Education

Bachelor's Degree in IT/Cybersecurity/CS

Job description

Anticipated Starting Salary: $66,458

The Office of Arkansas Lottery (OAL) IT Security Analyst is responsible for safeguarding the OAL operating systems, overseeing network security, and ensuring the integrity and confidentiality of data in compliance with state and federal regulations. This position plays a critical role in monitoring the gaming systems and online vendor systems, focusing on firewall management, identifying vulnerabilities, and providing secondary support for in-state draw games. The OAL IT Security Analyst will work closely with the IT department to maintain secure operations, protect sensitive information, assist in the overall cybersecurity strategy for OAL and handle other duties as assigned.

Preferred Qualifications:

A bachelor's degree in Information Technology, Computer Science, or a related field, plus two (2) years of experience in information security, network monitoring, or cybersecurity roles are required.

Strong problem-solving abilities to assess security threats, evaluate potential vulnerabilities, and devise effective solutions to mitigate risks. Highly detail-oriented, with the ability to identify even subtle discrepancies or vulnerabilities in systems that could compromise security. Excellent communication skills, both written and verbal, to document incidents, explain complex security matters to non-technical staff, and collaborate with external vendors. Ability to make swift decisions under pressure, particularly in response to security incidents or breaches.

The mission of the Department of Finance and Administration is to provide Arkansas citizens convenient, effective, and courteous service which will encourage voluntary compliance with tax, license, and child support laws.

Position Information

Job Series: Information Technology - IT Security

Classification: IT Security Analyst I

Class Code: IIE02P

Pay Grade: IST06

Salary Range: $66,458 - $108,431

Job Summary

The IT Security Analyst I is responsible for protecting an agency's or organization's computer systems, networks, and data from cyber threats and vulnerabilities. This role involves monitoring security systems, analyzing potential risks, responding to incidents, and implementing measures to safeguard sensitive information. The IT Security Analyst I works proactively to identify weaknesses, maintains compliance with security standards, and ensures the confidentiality, integrity, and availability of organizational data.

Primary Responsibilities

• Monitor network traffic, systems, and applications for suspicious activity and potential threats.
• Perform vulnerability assessments and penetration testing to identify and mitigate security risks.
• Investigate, document, and respond to security incidents, breaches, and anomalies.
• Develop and implement security policies, standards, and procedures to protect information technology infrastructure.
• Collaborate with information technology teams to ensure secure configurations of systems and applications.
• Maintain and update security tools such as firewalls, antivirus software, and intrusion detection systems.
• Conduct regular security audits and risk assessments to ensure compliance with industry standards.
• Provide security awareness training to employees to promote best practices.
• Research and evaluate emerging security technologies and threats to recommend innovative solutions.
• Prepare detailed reports on security incidents, vulnerabilities, and risk mitigation strategies.

Knowledge and Skills

Excellent analytical and problem-solving skills to detect and resolve security threats. Strong attention to detail and ability to work under pressure in high-stakes situations. Effective communication skills for reporting incidents and providing recommendations to technical and non-technical personnel. Proactive mindset with the ability to anticipate and prevent potential security breaches. Commitment to continuous learning to stay current with evolving cybersecurity threats and technologies.

Minimum Qualifications

Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or a related field.

Familiarity with regulatory requirements and frameworks such as General Data Protection Regulation or Payment Card Industry Data Security Standard.

Strong understanding of network protocols, operating systems, and cloud security principles.

Satisfaction of the minimum qualifications, including years of experience and service, does not entitle employees to automatic progression within the job series. Promotion to the next classification level is at the discretion of the department and the Office of Personnel Management, taking into consideration the employee’s demonstrated skills, competencies, performance, workload responsibilities, and organizational needs.

Licensure/Certifications

N/AOTHER JOB RELATED EDUCATION AND/OR EXPERIENCE MAY BE SUBSTITUTED FOR ALL OR PART OF THESE BASIC REQUIREMENTS, EXCEPT FOR CERTIFICATION OR LICENSURE REQUIREMENTS, UPON APPROVAL OF THE QUALIFICATIONS REVIEW COMMITTEE.

The State of Arkansas is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, pregnancy, age, disability, citizenship, national origin, genetic information, military or veteran status, or any other status or characteristic protected by law.

This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the Form I-9. For more information on E-Verify, or if you believe that your employer has violated its E-Verify responsibilities, please contact DHS at [phone] or dhs.gov/e-verify.