Senior Cyber Compliance Specialist (Information Systems Specialist 8) Hybrid Work Options (Permanent Full-Time Position)

Oregon Health Authority; Salem (OR); Hybrid; USD 87,000 - 132,000; Full time

Benefits offered by this job

Excellent medical coverage

Vision and dental coverage

PERS/OPSRP retirement benefits

Paid time off and holidays

Job summary

Oregon Health Authority seeks a Senior Cyber Compliance Specialist (Information Systems Specialist 8) in Salem for hybrid, permanent, full-time work. You will lead security governance, incident response, vulnerability management, and policy compliance to protect agency IT assets while meeting state and federal requirements.

The role emphasizes collaboration with IT security teams, strong communication, and staying current with threat landscapes.

Qualifications

• Seven (7) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• OR
• An associate’s degree or higher in Computer Science, Information Technology, or related field, OR completion of a two (2) year accredited vocational training program in information technology or related field; AND 5 years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• OR
• A bachelor’s degree in computer science, Information technology, or related field AND three (3) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• OR
• Master’s degree in information technology, Computer Science, or related field AND

Responsibilities

• Develop, implement, and maintain security solutions aligned with state/federal requirements, CIS, and NIST frameworks.
• Respond to IT security events, incidents, or breaches by investigating and mitigating threats.
• Identify and remediate vulnerabilities to keep software/hardware up to date with patches.
• Advise on information protection and IT security policies and enforce compliance.
• Ensure continuous monitoring and incident escalation with CSS/SOC teams.
• Document security events, vulnerabilities, and remediation actions with reports for management.

Skills

Cybersecurity operations

IT risk management

Incident response

Communication skills

Education

Associate degree or higher in CS/IT or related field

Bachelor’s degree in CS/IT or related field

Master’s degree in IT/CS or related field

Tools

CJIS background knowledge

Job description

Position Title

Senior Cyber Compliance Specialist (Information Systems Specialist 8) Hybrid Work Options (Permanent Full-Time Position)

Initial Posting Date

10/28/2026

Application Deadline

11/11/2026

Agency

Oregon Health Authority

Salary Range

$7,807 - $11,823

Position Type

Employee

Job Description

If this opportunity aligns with your strengths, background, and commitment to fostering inclusivity, we encourage you to apply! At the Oregon Health Authority (OHA), we value diversity and encourage applicants from all backgrounds and experiences to help us build a stronger, more equitable future for all.

Candidates must submit a resume, cover letter and complete Workday application. Those who do not follow these instructions will be declined. This is a permanent full-time position (Not a limited duration role).

Opportunity Awaits, Apply Today! – Senior Cyber Compliance Specialist (Information Systems Specialist 8) – Hybrid work available

IT Security Management: The Senior Cyber Compliance Specialist is responsible for developing, implementing, and maintaining security solutions that align with state and federal requirements, Center for Internet Security and National Institute of Standards and Technology Frameworks, that enable business units to meet their statutory mandates. The role focuses on enhancing IT security for the agencies by implementing best practices, policies, and standards.

Incident Response: In the event of IT security events, incidents or breaches, the Senior Compliance Specialist plays a critical role in responding to and mitigating the impact on agency IT assets. This involves investigating events, incidents, identifying compromised assets, and taking remedial actions to contain and eradicate threats.

Vulnerability Management: The position assists in identifying and remediating vulnerabilities on IT Assets ensuring that all software and hardware are up to date with the latest security patches and firmware

Policy Compliance: The Senior Cyber Compliance Specialist advises on the development of information protection and IT security policies and enforces the policies to ensure both agencies are compliant with state and federal requirements in delivering secure and protected IT assets in support of business unit functions.

Security Monitoring and Alerting: This position will ensure continuous monitoring strategies are in place for each system/platform and work with Enterprise Information Services (EIS) Cyber Security Services (CSS) Security Operations Center (SOC) for suspicious activity, unauthorized access, and potential security incidents. The Senior Cyber Operations & Compliance Specialist responds to security alerts, conducts investigations, and escalates incidents as necessary to ensure compromised IT assets are contained and isolated and that incidents are eradicated from the network.

Documenting and Reporting: Accurate and up-to-date documentation is essential in IT security. The Senior Cyber Compliance Specialist maintains records of security events and incidents, vulnerabilities, and remediation efforts. They also generate reports to provide insights into management and demonstrate compliance with IT security standards and regulations.

Collaboration and Communication: The role involves working closely with other IT security professionals, OIS Subject Matter Experts and teams, and departments across agencies to ensure alignment with security policies and initiatives.

Continuous Improvement: The Senior Cyber Compliance Specialist actively seeks ways to improve IT security and customer service processes. They stay up to date with the latest security threats and technologies to enhance the agency’s security posture.

What We Are Looking For

Minimum Qualifications

These qualifications must be reflected in your application for consideration.

(a) Seven (7) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

OR

(b) An associate’s degree or higher in Computer Science, Information Technology, or related field, OR completion of a two (2) year accredited vocational training program in information technology or related field; AND 5 years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

OR

(c) A bachelor’s degree in computer science, Information technology, or related field AND three (3) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

OR

(d) Master’s degree in information technology, Computer Science, or related field AND

Desired Attributes

• Successful completion of one of the following certifications or willingness to obtain one within 12 months of hire: (a) Certified Information Systems Security Professional (CISSP) OR (b) Certified Information Security Manager (CISM).
• Experience using management strategies and techniques to lead information security technical and program professionals.
• Experience working under federal, state and agency regulations and guidelines related to information security and protection from unauthorized disclosure of individually identified information.
• Experience with data governance and managing regulated data.
• Ability to translate technical issues and concepts to non-technical audience.
• Knowledge of the ODHS and OHA programs and other related government programs.
• Excellent written and verbal communication and presentation skills.
• Experience working with diverse groups with varying priorities and goals and moving those groups toward consensus.

Regarding CJIS

• Ability to be cleared by the FBI Criminal Justice Information Services (CJIS) and Oregon State Police through a fingerprint-based criminal background check for access to criminal justice information (CJI).
• Must be able to pass CJIS training and testing.
• Requires a successful OHA background check, including a fingerprint-based national background check and abuse/neglect check.
• Preference Statement: Preference may be given to candidates who possess the following job-related knowledge, skills, and abilities.
• Professional experience in assessing and implementing security controls aligning with NIST and CIS controls, and a strong understanding of other regulated data frameworks, like HIPAA, OCIPA, and ISO 27001

Application Guidance

Submission Requirements

• Resume – Attach your current resume that clearly outlines your education and work experience relevant to this position.
• Cover Letter – Attach a cover letter/letter of interest, it will be reviewed and considered during the review and selection process.
• Supplemental Questions – Answer all supplemental questions completely and accurately.
• Final Check! – Before submitting, confirm that all required materials are included, and your Workday Job History is current. The information in your application will be used to complete an Equal Pay Analysis to determine salary placement upon hire. Visit the Equal Pay Analysis Webpage for more information.

Reminders

• Eligible veterans and Oregon National Guard servicemembers (current and former) who meet the qualifications of the position will be awarded candidate preference. To protect your information and ensure correct processing, please follow the instructions for submitting your Veterans’ Preference documentation.
• Please download and save a copy of this job announcement and linked position description, as it is not available after the application deadline.

Benefits

• Excellent, low-cost medical, vision, and dental coverage for you and your family.
• Optional benefits like life insurance, disability coverage, deferred compensation, and FSA options for health and childcare.
• Generous paid time off: 11 holidays, 3 personal days, monthly sick leave, and vacation accrual starting at 8 hours/month.
• Potential eligibility for the Public Service Loan Forgiveness Program.
• Retirement security through Public Employees Retirement System (PERS)/Oregon Public Service Retirement Plan (OPSRP).
• Training and development opportunities to grow your career with the State of Oregon.

Additional Details

• This announcement is for 1 full-time, permanent, classified, Senior Cyber Compliance Specialist (Information Systems Specialist 8), based in Salem, Oregon.
• This is a hybrid position. “Review Section 4: Working Conditions” in the position description (linked above) for more information.
• Employment is contingent upon a criminal records check that meets OHA criteria at the time of hire and throughout employment.
• The salary listed is the non-PERS qualifying range. If the successful candidate qualifies for PERS, the salary range will increase by 6.95%. For more information, see the Classification and Compensation page.
• The State of Oregon does not request or require your age, date of birth, attendance or graduation dates from an education institution during the application process.
• This position does not provide visa sponsorship. Within three days of hire, you will be required to complete I-9 documentation and confirm authorization to work in the United States. OHA will use E-Verify to verify work authorization. If your employment eligibility depends on sponsorship now or in the future, you will not meet the requirements for this position.

Contact Information

Recruiter: Kyle Phillips

Email: [e-mail]

Phone (text friendly): 503-509-3589

Accommodation Requests (ADA): OHA provides reasonable accommodation under the ADA, which may include alternative formats of materials or language support. If you need accommodation to apply for this position or participate in the selection process, please contact the recruiter listed above.

Helpful Links & Resources

How to Set Job Alerts | Workday Applicant FAQ | Oregon Health Authority | Facebook | Instagram | LinkedIn | Veterans Resources | What You Need to Know to Get the Job

The Oregon Health Authority is an affirmative action and equal opportunity employer, committed to fair employment practices and pay equity for all employees. We do not discriminate based on protected class – including race, sex, veteran status, disability, age, color, religion, national origin, marital status, or sexual orientation – and does not screen applicants based on current or past compensation. Salary is determined through a fair review of your education, experience, and training as it relates to the position.
OHA is an anti-racist organization working to eliminate health inequities and dismantle structural barriers that impact underserved communities. Join us in advancing our Strategic Plan and building a more equitable Oregon.