Senior Cyber Compliance & Security Analyst (Hybrid)

Oregon Inc; Salem (OR); Hybrid; USD 87,000 - 132,000; Full time

Benefits offered by this job

Excellent medical, vision and dental

Low-cost medical coverage

Generous paid time off (11 holidays, 3

Public Service Loan Forgiveness (PSLF)

Training and development opportunities

Job summary

Oregon Health Authority (OHA) seeks a Senior Cyber Compliance Specialist (IS 8) in a permanent full‑time, hybrid role based in Salem, Oregon. The position focuses on IT security management, incident response, vulnerability management, policy compliance, and security monitoring to protect agency assets and meet regulatory requirements.

The role requires extensive cybersecurity experience, knowledge of NIST/CIS controls, and CJIS background clearance.

Qualifications

• Seven years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• Bachelor’s degree or higher in CS/IT or related field with required experience.
• CISSP or CISM preferred or willingness to obtain within 12 months.

Responsibilities

• Develop, implement, and maintain security solutions aligning with state and federal frameworks (CIS/NIST).
• Lead incident response to investigate, contain, and remediate security events.
• Identify and remediate vulnerabilities across IT assets; ensure patches and firmware are up to date.
• Advise on information protection policies and enforce compliance with regulations.
• Establish continuous security monitoring with SOC collaboration to detect threats.

Skills

Cybersecurity operations

Network administration

Information security risk management

Communications skills

Education

Bachelor's degree in Computer Science or Information Technology

Associate degree in Computer Science or Information Technology

Two-year accredited vocational training in IT

Master's degree in IT or related field

Job description

Oregon Health Authority (OHA) seeks a Senior Cyber Compliance Specialist (IS 8) in a permanent full‑time, hybrid role based in Salem, Oregon. The position focuses on IT security management, incident response, vulnerability management, policy compliance, and security monitoring to protect agency assets and meet regulatory requirements.

The role requires extensive cybersecurity experience, knowledge of NIST/CIS controls, and CJIS background clearance.