Senior Cyber Compliance & Security Lead (Hybrid)

State of Oregon; Salem (OR); Hybrid; USD 87,000 - 132,000; Full time

Benefits offered by this job

Excellent medical, vision, and dental

PERS/OPSRP retirement

Paid time off: holidays, personal days

Public Service Loan Forgiveness (elig)

Training and development opportunities

Job summary

The Oregon Health Authority seeks a Senior Cyber Compliance Specialist to manage a rigorous IT security program, safeguarding desktops, servers, and mobile devices across hybrid environments. You will apply CIS/NIST controls, lead incident response, and drive vulnerability management to meet state and federal requirements.

Success requires strong communication, collaboration with IT teams, and the ability to translate complex security concepts for non-technical stakeholders.

Qualifications

• Seven years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• An associate’s degree or higher in Computer Science, Information Technology, or related field; AND 5 years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• A bachelor’s degree in computer science, Information technology, or related field AND three years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• Master’s degree in information technology, Computer Science, or related field AND one year of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

Responsibilities

• Develop, implement, and maintain security solutions aligned with state and federal requirements (NIST/CIS).
• Respond to IT security events, investigate incidents, contain threats, and remediate.
• Identify and remediate vulnerabilities on IT assets; ensure up-to-date software/firmware.
• Advise on information protection policies; enforce policies for regulatory compliance.
• Monitor security across systems; coordinate with SOC for suspicious activity and incidents.
• Document security events, vulnerabilities, and remediation; generate compliance reports.

Skills

Cybersecurity operations

IT security risk management

Incident response

Vulnerability management

Policy development

Communication

Education

Associate degree or higher in CS/IT or related field

Bachelor's degree in CS/IT or related field

Master's degree in IT or related field

Tools

NIST/CIS frameworks

Job description

The Oregon Health Authority seeks a Senior Cyber Compliance Specialist to manage a rigorous IT security program, safeguarding desktops, servers, and mobile devices across hybrid environments. You will apply CIS/NIST controls, lead incident response, and drive vulnerability management to meet state and federal requirements.

Success requires strong communication, collaboration with IT teams, and the ability to translate complex security concepts for non-technical stakeholders.