Principal Information Security Analyst (Information Systems Analyst, Principal - Generalist)

City of Portland; Beaverton (OR); Hybrid; USD 120,000 - 180,000; Full time

Job summary

City of Portland’s Bureau of Technology Services seeks two Principal Information Security Analysts to strengthen cybersecurity across IT and OT environments. You will translate complex requirements into practical solutions that protect City information, support continuity, and improve cybersecurity maturity.

The roles emphasize enterprise security architecture, OT security, risk assessment, and compliance, with a remote-first model and occasional onsite work in Oregon or Washington.

Qualifications

• Senior technical leadership in cybersecurity architecture, risk management, and compliance across complex enterprise environments.
• Experience with cybersecurity frameworks and standards (e.g., NIST CSF) and applying them to assessments and improvement planning.
• Enterprise security across networks, systems, cloud, and OT/ICS environments including IAM and zero trust.
• Experience evaluating security operations using SIEM, EDR, and vulnerability management tooling.
• Interpreting regulatory requirements and documenting controls and remediation priorities.
• Strong ability to communicate technical findings to diverse audiences and influence decisions.

Responsibilities

• Lead cybersecurity improvements across City IT and OT environments with measurable plans.
• Advise on secure architecture including cloud security, IAM, data protection, and zero trust.
• Strengthen security operations with baselines, configurations, monitoring, and procedures.
• Protect critical infrastructure by addressing OT/ICS security and secure remote access.
• Assess and prioritize risk through threat modeling, risk assessments, and audits, with remediation recommendations.
• Support governance and compliance alignment with city policies and regulatory requirements.
• Integrate cybersecurity requirements into technology planning, procurement, and service operations.
• Support incident response through investigation, containment, and recovery improvements.
• Build shared understanding by documenting findings and enabling training across teams.

Skills

Cybersecurity architecture

Risk management

OT security

NIST CSF

Zero trust

IAM

Leadership

Communication

Tools

SIEM

EDR

Firewalls

Vulnerability management

OT monitoring tools

Job description

Job Appointment: Full Time, Regular
Work Schedule: Monday - Friday, 8:00 AM - 5:00 PM. Alternate schedules may be available.
Work Location: This position has an exception to work primarily remotely. However, there will be instances when it is necessary to come onsite for work (with as much advance notice as possible). Remote work must be performed within Oregon or Washington. For more information, click here.
Union Representation: PROTEC17. To view current labor agreements, click here.
Starting Pay: The City of Portland follows the Oregon Equal Pay Act. Your salary is determined based on the experience listed in your resume that is directly related and equivalent to the position for which you are applying.

Help protect the technology and critical infrastructure that Portland communities depend on every day.

The Bureau of Technology Services (BTS) is seeking two Principal Information Security Analysts to strengthen cybersecurity, reduce risk, and support reliable delivery of essential City services.

In this role, you will provide senior technical leadership across information technology (IT) and operational technology (OT) environments, including industrial control systems and supervisory control and data acquisition (ICS-SCADA) systems. You will translate complex security and compliance requirements into practical solutions that protect City information, support operational continuity, and improve cybersecurity maturity.

The two positions support the following service areas:

• Public Safety Service Area: Bureau of Emergency Communications, Portland Bureau of Emergency Management, Portland Fire & Rescue, and Portland Police Bureau.

• Public Works Service Area: Bureau of Environmental Services, Portland Parks & Recreation, Portland Bureau of Transportation, and Portland Water Bureau.

Both positions report to the Chief Information Security Officer (CISO) and work within a matrix reporting structure with their respective service area’s senior managers. Assignments may emphasize enterprise security architecture and engineering or OT cybersecurity and critical infrastructure resilience, depending on program priorities and candidate strengths.

These positions work primarily remotely, with onsite attendance required for operational needs and cybersecurity incidents. Remote work must be performed within Oregon or Washington.

What You’ll Do:

• Lead cybersecurity improvements: Assess current capabilities, identify security gaps, and develop measurable improvement plans across City IT and OT environments.

• Advise on security architecture: Guide technology teams and leadership on secure system design, cloud security, identity and access management, data protection, network security, and zero trust principles.

• Strengthen security operations: Develop and improve technical baselines, secure configurations, monitoring, alerting, vulnerability management, and operating procedures.

• Protect critical infrastructure: Partner with operational teams to address OT and ICSS-CADA risks, including network segmentation, secure remote access, vendor connectivity, monitoring, and recovery readiness.

• Assess and prioritize risk: Conduct or support threat modeling, risk assessments, control reviews, vulnerability assessments, penetration testing, and audits. Recommend practical remediation and investment priorities.

• Support governance and compliance: Align cybersecurity practices with City policies, applicable regulatory requirements, and recognized frameworks. Prepare documentation and evidence that support audits and compliance reviews.

• Integrate security into City projects: Participate in architecture reviews and help incorporate cybersecurity requirements into technology planning, procurement, implementation, and service operations.

• Support incident response: Assist with investigation, containment, recovery, and improvements following cybersecurity incidents.

• Build shared understanding: Explain technical findings and risks to diverse audiences, document recommendations and decisions, and support training and knowledge sharing across teams.

Ideal Candidate Profile:

• Experienced Technical Leader: Brings broad enterprise cybersecurity expertise and depth in security architecture, engineering, risk management, or OT security.

• Practical Problem Solver: Recommends security controls that balance risk, compliance, safety, operational continuity, and service delivery.

• Collaborative Partner: Builds trust across technical teams, bureau leadership, operational staff, vendors, and external partners. Can influence decisions across organizational boundaries.

• Clear Communicator: Creates useful technical documentation and translates complex cybersecurity issues into actionable recommendations for executives and nontechnical audiences.

• Continuous Improvement Focus: Works independently to assess capabilities, prioritize improvements, and demonstrate measurable progress.

• Critical Infrastructure Perspective: Understands the challenges of protecting essential services, including legacy systems, operational constraints, and recovery needs. Experience with OT/ICS-SCADA, NIST SP 800-82, or ISA/IEC 62443 is valuable.

• Public Service Commitment: Values equitable outcomes, responsible use of City resources, and reliable services for the community. Works effectively and respectfully in a culturally and gender-diverse workplace.

Please address and demonstrate, in your cover letter and resume, how your education, training, and/or experience meet each of the following minimum qualifications. Include specific examples describing the work you performed, your individual role, the tools or methodologies you used, and the results. Statements that you have the required experience, without supporting examples, do not provide enough information for reviewers to assess your qualifications:

1. Experience providing senior technical leadership in cybersecurity architecture, risk management, and compliance across complex enterprise technology environments, supported by relevant formal training, industry-recognized certifications, or equivalent professional experience.

2. Experience with cybersecurity frameworks and standards, including the NIST Cybersecurity Framework and relevant NIST Special Publications, and their application to security assessments, control design, and cybersecurity improvement planning.

3. Experience in enterprise security practices across networks, systems, applications, cloud platforms, operating systems, and virtualization, including identity and access management, zero trust principles, security hardening, and configuration management.

4. Experience evaluating or improving cybersecurity operations using tools and practices such as security information and event management (SIEM), endpoint detection and response (EDR), intrusion detection and prevention, firewalls, vulnerability management, and penetration testing.

5. Experience interpreting and supporting applicable regulatory requirements and cloud security controls, including documenting compliance, assessing control gaps, and recommending remediation priorities.

6. Experience analyzing complex cybersecurity issues, developing clear technical documentation and actionable recommendations, and communicating effectively with technical teams, leadership, and nontechnical partners to support collaborative decisions.

Additional Requirements: Selected candidates must pass a comprehensive background investigation, possess a valid Oregon or Washington driver’s license, and be able to travel to City facilities when needed. Where equivalent experience is accepted in place of cybersecurity training or certifications, additional training and certifications

Preferred Qualifications:

These qualifications are not required but will be considered when evaluating applicants:

• Experience with operational technology (OT), industrial control systems (ICS), supervisory control and data acquisition (SCADA), and distributed control systems, including OT network architecture, segmentation, and the Purdue Model.

• Experience applying OT cybersecurity guidance, such as NIST SP 800-82 or ISA/IEC 62443, while addressing safety, availability, legacy systems, and operational continuity.

• Experiencein use of industrial protocols, such as Modbus, DNP3, and OCP, and their cybersecurity considerations.

• Experience implementing OT monitoring, anomaly detection, secure remote access, vendor access controls, or incident response processes.

• Experience supporting architecture review boards, enterprise risk management, governance, risk, and compliance tools, or cybersecurity maturity programs.

• Experience working in government, utilities, healthcare, or other regulated or critical infrastructure environments.

• Experience developing cybersecurity strategies, architecture roadmaps, maturity models, or measurable improvement plans.

• Relevant cybersecurity certifications, such as CISSP, CISM, CISA, GIAC, CCSK, or comparable credentials. FEMA Incident Command System and National Incident Management System (ICS/NIMS) training is also valuable.

Learn More About:

• How to Apply Videos and Workshops
• City of Portland Core Values
• HRAR-3.01 - Recruitment Processes
• Veteran Preference Information
• Total Compensation and Benefits
• Language Pay Differential Eligibility

We’re committed to providing a fair, inclusive, and accessible hiring process. If you need assistance with your application or would like to request a reasonable accommodation due to a disability, pregnancy, or religious belief, please contact the recruiter listed below.

Questions? We're here to help!

TroyLynn Craft, Senior Recruiter
[e-mail]
Bureau of Human Resources