Senior Cybersecurity Analyst

Lancaster County Government; South Carolina; On-site; USD 90,000 - 140,000; Full time

Job summary

Lancaster County Government seeks a Senior Cybersecurity Analyst to lead the development and execution of the organization’s security program, overseeing risk management, incident response, and ongoing security operations to align with county goals.

Under general supervision, you will mentor staff, coordinate with IT teams, and ensure compliance with CJIS, NIST, and ISO/IEC 27001 standards, while communicating security priorities to executives.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field; a master’s degree is a plus.
• Minimum 5 years of experience in cybersecurity.
• Experience with security management frameworks such as ISO/IEC 27001, NIST, CIS, or equivalent.
• Hands-on experience with security tools (firewalls, IDS/IPS, SIEM, encryption, etc.).
• Certifications such as CISSP, CISM, CEH, or GIAC are preferred.

Responsibilities

• Develop and manage the organization’s cybersecurity strategy.
• Lead the cybersecurity team and coordinate cross-department efforts.
• Ensure organizational compliance with CJIS, GDPR, CCPA, ISO/IEC 27001, NIST, and related standards.
• Monitor threat detection, incident response, and vulnerability management.
• Oversee risk assessments, audits, and penetration testing.
• Deliver cybersecurity awareness training for employees.
• Support audits and regulatory compliance initiatives.
• Travel for conferences/training as needed; on-call for incidents.

Skills

Cybersecurity leadership

Risk management

Incident response

Security architecture

Team leadership

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field

Master’s degree a plus

Tools

Firewalls

IDS/IPS

SIEM

Encryption

Job description

Under the general supervision of the Chief Information Officer (CIO) and Deputy Director of Information Technology, the Senior Cybersecurity Analyst oversees and manages the organization’s information security, ensuring that all systems are secure, policies are enforced, and the organization remains compliant with applicable laws and regulations. The Senior Cybersecurity Analyst is responsible for developing, implementing, and maintaining a comprehensive cybersecurity program that protects sensitive data, critical infrastructure, and information systems from internal and external threats, while aligning security initiatives with organizational objectives and industry best practices. This role involves assessing and managing risk, monitoring and responding to security incidents, overseeing vulnerability management and security tools, and ensuring timely remediation of identified issues. The Senior Cybersecurity Analyst works closely with IT staff, leadership, and other stakeholders to integrate security across all technology operations, enforce security policies and standards, support audits and compliance efforts, and promote security awareness and training, while continuously evaluating emerging threats and technologies to strengthen the organization’s overall security posture.

Leadership & Strategy:

Develop, implement, and manage the company’s cybersecurity strategy to align with business goals.

Lead the cybersecurity team, providing guidance and expertise to ensure effective operation and collaboration across departments.

Ensure organizational compliance with relevant laws, regulations, and standards, such as CJIS, GDPR, CCPA, ISO/IEC 27001, NIST, etc.

Advise executive leadership on potential security risks and strategies for mitigation.

Security Operations:

Monitor, evaluate, and update the organization’s cybersecurity framework.

Oversee threat detection, incident response, and vulnerability management processes.

Manage and respond to security incidents, including investigation, mitigation, and documentation.

Implement and enforce data protection, access control, and risk management policies.

Collaborate with IT teams to ensure secure configuration and deployment of IT systems and applications.

Risk Management:

Conduct regular security risk assessments, audits, and penetration tests to identify vulnerabilities and gaps.

Implement risk mitigation plans and ensure appropriate security measures are in place for all IT projects.

Maintain up-to-date knowledge of cybersecurity trends, tools, and regulatory changes.

Training & Awareness:

Create and deliver cybersecurity awareness training for employees.

Develop security best practices and guidelines for internal teams to ensure data integrity and privacy.

Promote a culture of security awareness across the organization.

ADDITIONAL JOB FUNCTIONS

Office-based role with occasional travel for conferences, training, or vendor meetings.

On-call availability for urgent security incidents or breaches.

Performs related duties as required.

EDUCATION & EXPERIENCE

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. A master’s degree is a plus.

5 years of experience in cybersecurity.

Experience with security management frameworks such as ISO/IEC 27001, NIST, CIS, or equivalent.

Hands-on experience with security tools (firewalls, IDS/IPS, SIEM, encryption, etc.).

Certifications (preferred):

Certified Information Systems Security Professional (CISSP)

Certified Information Security Manager (CISM)

Certified Ethical Hacker (CEH)

GIAC Security Essentials (GSEC)

SKILLSET & OTHER QUALIFICATIONS

Strong leadership and team management skills.

In-depth knowledge of cybersecurity principles, techniques, and protocols.

Excellent problem-solving and analytical skills.

Ability to handle high-pressure situations and make sound decisions quickly.

Strong communication skills to interact effectively with technical teams, business leaders, and non-technical stakeholders.

Must have a valid driver’s license, clean driving record, and be able to pass an FBI / CJIS fingerprint and background checks.

Physical Requirements: Tasks require the ability to exert very moderate physical effort in light work. They typically involve some combination of stooping, kneeling, crouching, and crawling and can involve some lifting, carrying, pushing, and pulling of objects and materials of moderate weight (up to 20 pounds) and occasionally heavier weight (up to 40 pounds). Tasks may involve extended periods at a keyboard or workstation.

Data Conception: Requires the ability to compare and judge the readily observable functional, structural, or compositional characteristics (similar to or divergent from apparent standards) of data, people, or things.

Interpersonal Communications: Requires speaking and signaling people to convey and exchange information. Includes receiving direction and instruction from supervisor.

Language Ability: Requires reading various policies and procedures, technical manuals, diagrams, etc. The ability to prepare technical reports, records, etc., with proper format, punctuation, spelling, and grammar, using all parts of speech, and to speak with and before others with poise, voice control, and confidence.

Intelligence: Requires the ability to apply principles of logical thinking to define problems, collect data, establish facts, and draw valid conclusions; to deal with several abstract and concrete variables. Requires the ability to learn and understand relatively complex principles and techniques, make independent judgments without supervision, and acquire knowledge of topics related to primary occupation. Must have the ability to comprehend and interpret received information.

Verbal Aptitude: Requires the ability to record and deliver information, explain procedures, and follow and give oral and written instructions to teach employees. Communicate effectively and efficiently in various technical and professional languages, including computer science and data processing.

Numerical Aptitude: Requires the ability to add and subtract totals, multiply and divide, use mathematical formulas, determine percentages and decimals, and determine time.

Form/Spatial Aptitude: Requires the ability to inspect items for proper length, width, and shape and visually read various information.

Motor Coordination: Requires the ability to coordinate hands and eyes using office machinery.

Manual Dexterity: Requires the ability to handle various items, including keyboards, office equipment, control knobs, buttons, switches, catches, tools, etc. Must have moderate levels of eye/hand/foot coordination.

Color Discrimination and Visual Acuity: The ability to differentiate colors and shades of paint requires visual acuity to determine depth perception, peripheral vision, inspection of small parts, preparation and analysis of written or computer data, etc.

Interpersonal Temperament: Requires the ability to deal with people beyond giving and receiving instructions. Must be adaptable to performing under stress when confronted with emergencies or tight deadlines.

Physical Communications: Requires the ability to talk and hear (talking: expressing or exchanging ideas using spoken words; hearing: perceiving the nature of sounds by ear).