Senior Cyber Compliance Specialist (Information Systems Specialist 8) Hybrid Work Options (Permanent Full-Time Position)

State of Oregon; Salem (OR); Hybrid; USD 87,000 - 132,000; Full time

Benefits offered by this job

Excellent medical, vision, and dental

PERS/OPSRP retirement

Paid time off: holidays, personal days

Public Service Loan Forgiveness (elig)

Training and development opportunities

Job summary

The Oregon Health Authority seeks a Senior Cyber Compliance Specialist to manage a rigorous IT security program, safeguarding desktops, servers, and mobile devices across hybrid environments. You will apply CIS/NIST controls, lead incident response, and drive vulnerability management to meet state and federal requirements.

Success requires strong communication, collaboration with IT teams, and the ability to translate complex security concepts for non-technical stakeholders.

Qualifications

• Seven years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• An associate’s degree or higher in Computer Science, Information Technology, or related field; AND 5 years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• A bachelor’s degree in computer science, Information technology, or related field AND three years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.
• Master’s degree in information technology, Computer Science, or related field AND one year of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

Responsibilities

• Develop, implement, and maintain security solutions aligned with state and federal requirements (NIST/CIS).
• Respond to IT security events, investigate incidents, contain threats, and remediate.
• Identify and remediate vulnerabilities on IT assets; ensure up-to-date software/firmware.
• Advise on information protection policies; enforce policies for regulatory compliance.
• Monitor security across systems; coordinate with SOC for suspicious activity and incidents.
• Document security events, vulnerabilities, and remediation; generate compliance reports.

Skills

Cybersecurity operations

IT security risk management

Incident response

Vulnerability management

Policy development

Communication

Education

Associate degree or higher in CS/IT or related field

Bachelor's degree in CS/IT or related field

Master's degree in IT or related field

Tools

NIST/CIS frameworks

Job description

Initial Posting Date:

10/28/2026

Application Deadline:

11/11/2026

Agency:

Oregon Health Authority

Salary Range:

$7,807 - $11,823

Position Type:

Employee

Position Title:

Senior Cyber Compliance Specialist (Information Systems Specialist 8) Hybrid Work Options (Permanent Full-Time Position)

Job Description:

If this opportunity aligns with your strengths, background, and commitment to fostering inclusivity, we encourage you to apply! At the Oregon Health Authority (OHA), we value diversity and encourage applicants from all backgrounds and experiences to help us build a stronger, more equitable future for all.

The primary purpose of a Senior Cyber Specialist position is a crucial role in an OHA/ODHS IT security program by managing and securing IT assets such as desktops, laptops, servers, virtual and on-premises platforms and mobile devices. This position combines information technical expertise with customer service skills to ensure the protection of agency information assets, while also addressing agency security requirements supporting business operations and customer needs.

IT Security Management: The Senior Cyber Compliance Specialist is responsible for developing, implementing, and maintaining security solutions that align with state and federal requirements, Center for Internet Security and National Institute of Standards and Technology Frameworks, that enable business units to meet their statutory mandates. The role focuses on enhancing IT security for the agencies by implementing best practices, policies, and standards.

Incident Response: In the event of IT security events, incidents or breaches, the Senior Compliance Specialist plays a critical role in responding to and mitigating the impact on agency IT assets. This involves investigating events, incidents, identifying compromised assets, and taking remedial actions to contain and eradicate threats.

Vulnerability Management: The position assists in identifying and remediating vulnerabilities on IT Assets ensuring that all software and hardware are up to date with the latest security patches and firmware

Policy Compliance: The Senior Cyber Compliance Specialist advises on the development of information protection and IT security policies and enforces the policies to ensure both agencies are compliant with state and federal requirements in delivering secure and protected IT assets in support of business unit functions.

Security Monitoring and Alerting: This position will ensure continuous monitoring strategies are in place for each system/platform and work with Enterprise Information Services (EIS) Cyber Security Services (CSS) Security Operations Center (SOC) for suspicious activity, unauthorized access, and potential security incidents. The Senior Cyber Operations & Compliance Specialist responds to security alerts, conducts investigations, and escalates incidents as necessary to ensure compromised IT assets are contained and isolated and that incidents are eradicated from the network.

Documenting and Reporting: Accurate and up-to-date documentation is essential in IT security. The Senior Cyber Compliance Specialist maintains records of security events and incidents, vulnerabilities, and remediation efforts. They also generate reports to provide insights into management and demonstrate compliance with IT security standards and regulations.

Collaboration and Communication: The role involves working closely with other IT security professionals, OIS Subject Matter Experts and teams, and departments across agencies to ensure alignment with security policies and initiatives.

Continuous Improvement: The Senior Cyber Compliance Specialist actively seeks ways to improve IT security and customer service processes. They stay up to date with the latest security threats and technologies to enhance the agency’s security posture.

What We Are Looking For

Minimum Qualifications:

These qualifications must be reflected in your application for consideration.

(a)) Seven (7) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

OR

(b)) An associate’s degree or higher in Computer Science, Information Technology, or related field, OR completion of a two (2) year accredited vocational training program in information technology or related field; AND 5 years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

OR

(c)) A bachelor’s degree in computer science, Information technology, or related field AND three (3) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

OR

(d)) Master’s degree in information technology, Computer Science, or related field AND one (1) year of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.

Desired Attributes:

• Successful completion of one of the following certifications or willingness to obtain one within 12 months of hire: (a) Certified Information Systems Security Professional (CISSP) OR (b) Certified Information Security Manager (CISM).

• Experience using management strategies and techniques to lead information security technical and program professionals.

• Experience working under federal, state and agency regulations and guidelines related to information security and protection from unauthorized disclosure of individually identified information.

• Experience with data governance and managing regulated data.

• Ability to translate technical issues and concepts to non-technical audience.

• Knowledge of the ODHS and OHA programs and other related government programs.

• Excellent written and verbal communication and presentation skills.

• Experience working with diverse groups with varying priorities and goals and moving those groups toward consensus.

Regarding CJIS:

• Ability to be cleared by the FBI Criminal Justice Information Services (CJIS) and Oregon State Police through a fingerprint-based criminal background check for access to criminal justice information (CJI).

• Must be able to pass CJIS training and testing.

• Requires a successful OHA background check, including a fingerprint-based national background check and abuse/neglect check.

• Preference Statement: Preference may be given to candidates who possess the following job-related knowledge, skills, and abilities.

• Professional experience in assessing and implementing security controls aligning with NIST and CIS controls, and a strong understanding of other regulated data frameworks, like HIPAA, OCIPA, and ISO 27001

Application Guidance

Your candidate profile and application are your opportunity to showcase your skills and interest in this role. Submissions will be reviewed for clarity, consistency, and communication skills, and for alignment with the guidance provided in the following:

Submission Requirements:

• Resume – Attach your current resume that clearly outlines your education and work experience relevant to this position.
• Cover Letter – Attach a cover letter/letter of interest, it will be reviewed and considered during the review and selection process.
• Supplemental Questions – Answer all supplemental questions completely and accurately.
• Final Check! – Before submitting, confirm that all required materials are included, and your Workday Job History is current. The information in your application will be used to complete an Equal Pay Analysis to determine salary placement upon hire. Visit the Equal Pay Analysis Webpage for more information.

If you’re driven by the passion to do something meaningful that changes lives, the Oregon Health Authority is the place for you. We also offer a competitive benefits package including:

• Excellent, low-cost medical, vision, and dental coverage for you and your family.
• Optional benefits like life insurance, disability coverage, deferred compensation, and FSA options for health and childcare.
• Generous paid time off: 11 holidays, 3 personal days, monthly sick leave, and vacation accrual starting at 8 hours/month.
• Potential eligibility for the Public Service Loan Forgiveness Program.
• Retirement security through Public Employees Retirement System (PERS)/Oregon Public Service Retirement Plan (OPSRP).
• Training and development opportunities to grow your career with the State of Oregon.

Additional Details

• This announcement is for 1 full-time, permanent, classified, Senior Cyber Compliance Specialist (Information Systems Specialist 8), based in Salem, Oregon.

• This is a hybrid position. “Review Section 4: Working Conditions” in the position description (linked above) for more information.

• Employment is contingent upon a criminal records check that meets OHA criteria at the time of hire and throughout employment.

• The salary listed is the non-PERS qualifying range. If the successful candidate qualifies for PERS, the salary range will increase by 6.95%. For more information, see the Classification and Compensation page.

• The State of Oregon does not request or require your age, date of birth, attendance or graduation dates from an education institution during the application process.

• This position does not provide visa sponsorship. Within three days of hire, you will be required to complete I-9 documentation and confirm authorization to work in the United States. OHA will use E-Verify to verify work authorization. If your employment eligibility depends on sponsorship now or in the future, you will not meet the requirements for this position.

The Oregon Health Authority is an affirmative action and equal opportunity employer, committed to fair employment practices and pay equity for all employees. We do not discriminate based on protected class - including race, sex, veteran status, disability, age, color, religion, national origin, marital status, or sexual orientation - and does not screen applicants based on current or past compensation. Salary is determined through a fair review of your education, experience, and training as it relates to the position.

OHA is an anti-racist organization working to eliminate health inequities and dismantle structural barriers that impact underserved communities. Join us in advancing our Strategic Plan and building a more equitable Oregon.