Senior Cyber Compliance Specialist (Information Systems Specialist 8) Hybrid Work Options (Permanent Full-Time Position)

Oregon Health Authority; Salem (OH); Hybrid; USD 87,000 - 132,000; Full time

Benefits offered by this job

Excellent medical, vision, and dental

Paid time off and holidays

PERS/OPSRP retirement

Job summary

The Oregon Health Authority seeks a Senior Cyber Compliance Specialist (Information Systems Specialist 8) in Salem. This hybrid, full-time role focuses on IT security management, incident response, vulnerability management, policy enforcement, and continuous improvement to protect state information systems.

Applicants should have strong experience in CIS/NIST frameworks, CJIS/Oregon requirements, and the ability to communicate complex security concepts to non-technical audiences.

Qualifications

• Seven years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management OR
• An associate’s degree or higher in Computer Science, Information Technology, or related field with 5 years of information systems experience in cybersecurity operations, etc. OR
• Bachelor’s degree with 3 years of information systems experience in cybersecurity operations, etc. OR
• Master’s degree with 1 year of information systems experience in cybersecurity operations.

Responsibilities

• Develop, implement, and maintain security solutions aligned with state and federal requirements and CIS/NIST frameworks.
• Respond to IT security events, investigate incidents, contain and eradicate threats.
• Identify and remediate vulnerabilities on IT assets and ensure up-to-date patches and firmware.
• Advise on and enforce information protection and IT security policies.
• Monitor systems and coordinate with SOC for suspicious activity and incidents.
• Document security events, incidents, vulnerabilities, and remediation efforts; generate management reports.
• Collaborate with IT security teams and departments across agencies to align on security policies.
• Continuously improve IT security processes and stay updated on threats and technologies.

Skills

IT security management

Incident response

Vulnerability management

Policy compliance

Security monitoring

Documentation and reporting

Collaboration and communication

Continuous improvement

Education

Bachelor's degree in computer science or related field

Associate degree or vocational training in IT (with experience)

Master’s degree in IT or related field

Job description

Senior Cyber Compliance Specialist (Information Systems Specialist 8)

Salary Range: $7,807 - $11,823

Contract Type: Permanent Full-Time Position

Location: Salem, Oregon (Hybrid work available)

Key Responsibilities

• IT Security Management: The Senior Cyber Compliance Specialist is responsible for developing, implementing, and maintaining security solutions that align with state and federal requirements, Center for Internet Security and National Institute of Standards and Technology Frameworks, that enable business units to meet their statutory mandates. The role focuses on enhancing IT security for the agencies by implementing best practices, policies, and standards.
• Incident Response: In the event of IT security events, incidents or breaches, the Senior Compliance Specialist plays a critical role in responding to and mitigating the impact on agency IT assets. This involves investigating events, incidents, identifying compromised assets, and taking remedial actions to contain and eradicate threats.
• Vulnerability Management: The position assists in identifying and remediating vulnerabilities on IT Assets ensuring that all software and hardware are up to date with the latest security patches and firmware.
• Policy Compliance: The Senior Cyber Compliance Specialist advises on the development of information protection and IT security policies and enforces the policies to ensure both agencies are compliant with state and federal requirements in delivering secure and protected IT assets in support of business unit functions.
• Security Monitoring and Alerting: This position will ensure continuous monitoring strategies are in place for each system/platform and work with Enterprise Information Services (EIS) Cyber Security Services (CSS) Security Operations Center (SOC) for suspicious activity, unauthorized access, and potential security incidents. The Senior Cyber Operations & Compliance Specialist responds to security alerts, conducts investigations, and escalates incidents as necessary to ensure compromised IT assets are contained and isolated and that incidents are eradicated from the network.
• Documenting and Reporting: Accurate and up-to-date documentation is essential in IT security. The Senior Cyber Compliance Specialist maintains records of security events and incidents, vulnerabilities, and remediation efforts. They also generate reports to provide insights into management and demonstrate compliance with IT security standards and regulations.
• Collaboration and Communication: The role involves working closely with other IT security professionals, OIS Subject Matter Experts and teams, and departments across agencies to ensure alignment with security policies and initiatives.
• Continuous Improvement: The Senior Cyber Compliance Specialist actively seeks ways to improve IT security and customer service processes. They stay up to date with the latest security threats and technologies to enhance the agency’s security posture.

Minimum Qualifications

• (a) Seven (7) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management. OR (b) An associate’s degree or higher in Computer Science, Information Technology, or related field, OR completion of a two (2) year accredited vocational training program in information technology or related field; AND 5 years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management. OR (c) A bachelor’s degree in computer science, Information technology, or related field AND three (3) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management. OR (d) Master’s degree in information technology, Computer Science, or related field AND one (1) year of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

Desired Attributes

• Successful completion of one of the following certifications or willingness to obtain one within 12 months of hire: (a) Certified Information Systems Security Professional (CISSP) OR (b) Certified Information Security Manager (CISM).
• Experience using management strategies and techniques to lead information security technical and program professionals.
• Experience working under federal, state and agency regulations and guidelines related to information security and protection from unauthorized disclosure of individually identified information.
• Experience with data governance and managing regulated data.
• Ability to translate technical issues and concepts to non-technical audience.
• Knowledge of the ODHS and OHA programs and other related government programs.
• Excellent written and verbal communication and presentation skills.
• Experience working with diverse groups with varying priorities and goals and moving those groups toward consensus.
• Regarding CJIS: Ability to be cleared by the FBI Criminal Justice Information Services (CJIS) and Oregon State Police through a fingerprint-based criminal background check for access to criminal justice information (CJI). Must be able to pass CJIS training and testing.
• Requires a successful OHA background check, including a fingerprint-based national background check and abuse/neglect check.

Preference Statement

Preference may be given to candidates who possess the following job-related knowledge, skills, and abilities.

• Professional experience in assessing and implementing security controls aligning with NIST and CIS controls, and a strong understanding of other regulated data frameworks, like HIPAA, OCIPA, and ISO 27001.

Benefits

• Excellent, low-cost medical, vision, and dental coverage for you and your family.
• Optional benefits like life insurance, disability coverage, deferred compensation, and FSA options for health and childcare.
• Generous paid time off: 11 holidays, 3 personal days, monthly sick leave, and vacation accrual starting at 8 hours/month.
• Potential eligibility for the Public Service Loan Forgiveness Program.
• Retirement security through Public Employees Retirement System (PERS)/Oregon Public Service Retirement Plan (OPSRP).
• Training and development opportunities to grow your career with the State of Oregon.

Salary Information

Salary is a non-PERS qualifying range. If the successful candidate qualifies for PERS, the salary range will increase by 6.95%.

Classified salary range: $7,807 - $11,823.

Eligibility and Requirements

This position does not provide visa sponsorship.

Within three days of hire, you will be required to complete I-9 documentation and confirm authorization to work in the United States. OHA will use E-Verify to verify work authorization. If your employment eligibility depends on sponsorship now or in the future, you will not meet the requirements for this position.

Employment is contingent upon a criminal records check that meets OHA criteria at the time of hire and throughout employment.

Equal Opportunity / Diversity Statement

The Oregon Health Authority is an affirmative action and equal opportunity employer, committed to fair employment practices and pay equity for all employees.

We do not discriminate based on protected class – including race, sex, veteran status, disability, age, color, religion, national origin, marital status, or sexual orientation – and does not screen applicants based on current or past compensation.

Salary is determined through a fair review of your education, experience, and training as it relates to the position.

OHA is an anti-racist organization working to eliminate health inequities and dismantle structural barriers that impact underserved communities.

Additional Information

Additional Details: This announcement is for 1 full-time, permanent, classified, Senior Cyber Compliance Specialist (Information Systems Specialist 8), based in Salem, Oregon. This is a hybrid position. “Review Section 4: Working Conditions” in the position description (linked above) for more information.

Eligible veterans and Oregon National Guard servicemembers (current and former) who meet the qualifications of the position will be awarded candidate preference.