Senior IT Security & Compliance Analyst

New Mexico Department of Justice; Albuquerque (NM); On-site; USD 90,000 - 120,000; Full time

Job summary

The New Mexico Health Care Authority seeks a Senior IT Security Analyst to lead governance, risk, and compliance efforts, ensuring adherence to federal and state IT security laws and policies. The role collaborates with staff, vendors, and auditors to drive security, audits, and remediation across enterprise systems.

Ideal candidates have MIS/IT education, 2+ years in IT security/compliance, and industry certifications (CISSP preferred; CISA/CISM/CASP+).

Qualifications

• Bachelor's degree in MIS, IT, CS, Engineering, or a related technical field.
• Two years of IT security or compliance validation experience.
• CISSP certification (required); CISA, CISM, or CASP+ preferred.

Responsibilities

• Develop cybersecurity governance policies, procedures, standards, and guidelines.
• Perform audits and monitor compliance with security policies, standards, and procedures.
• Coordinate with internal teams, regulatory auditors, and third-party security assessors.
• Provide input into enterprise-wide security policies and standards.
• Participate in defining project requirements and secure infrastructure designs.
• Support risk analysis, risk management processes, and remediation activities.
• Create, updating, and maintaining documentation for risks, controls, and remediation.
• Check user accounts and access requests against authorized permissions.

Skills

IT security

Compliance validation

Auditing

Regulatory awareness

Education

Bachelor's degree in MIS/IT/CS/Engineering

Bachelor's degree in CS/MIS/IT

IT security/cforensics certs

Job description

The New Mexico Health Care Authority seeks a Senior IT Security Analyst to lead governance, risk, and compliance efforts, ensuring adherence to federal and state IT security laws and policies. The role collaborates with staff, vendors, and auditors to drive security, audits, and remediation across enterprise systems.

Ideal candidates have MIS/IT education, 2+ years in IT security/compliance, and industry certifications (CISSP preferred; CISA/CISM/CASP+).