Senior Cyber Compliance & Security Lead (Hybrid)

Oregon Inc; Salem (OH); Hybrid; USD 87,000 - 132,000; Full time

Benefits offered by this job

Excellent medical, vision, and dental

Paid time off and holidays

PERS/OPSRP retirement

Job summary

The Oregon Health Authority seeks a Senior Cyber Compliance Specialist (Information Systems Specialist 8) in Salem. This hybrid, full-time role focuses on IT security management, incident response, vulnerability management, policy enforcement, and continuous improvement to protect state information systems.

Applicants should have strong experience in CIS/NIST frameworks, CJIS/Oregon requirements, and the ability to communicate complex security concepts to non-technical audiences.

Qualifications

• Seven years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management OR
• An associate’s degree or higher in Computer Science, Information Technology, or related field with 5 years of information systems experience in cybersecurity operations, etc. OR
• Bachelor’s degree with 3 years of information systems experience in cybersecurity operations, etc. OR
• Master’s degree with 1 year of information systems experience in cybersecurity operations.

Responsibilities

• Develop, implement, and maintain security solutions aligned with state and federal requirements and CIS/NIST frameworks.
• Respond to IT security events, investigate incidents, contain and eradicate threats.
• Identify and remediate vulnerabilities on IT assets and ensure up-to-date patches and firmware.
• Advise on and enforce information protection and IT security policies.
• Monitor systems and coordinate with SOC for suspicious activity and incidents.
• Document security events, incidents, vulnerabilities, and remediation efforts; generate management reports.
• Collaborate with IT security teams and departments across agencies to align on security policies.
• Continuously improve IT security processes and stay updated on threats and technologies.

Skills

IT security management

Incident response

Vulnerability management

Policy compliance

Security monitoring

Documentation and reporting

Collaboration and communication

Continuous improvement

Education

Bachelor's degree in computer science or related field

Associate degree or vocational training in IT (with experience)

Master’s degree in IT or related field

Job description

The Oregon Health Authority seeks a Senior Cyber Compliance Specialist (Information Systems Specialist 8) in Salem. This hybrid, full-time role focuses on IT security management, incident response, vulnerability management, policy enforcement, and continuous improvement to protect state information systems.

Applicants should have strong experience in CIS/NIST frameworks, CJIS/Oregon requirements, and the ability to communicate complex security concepts to non-technical audiences.