We are hiring IT Security Analyst - Direct Hire for one of our clients in Salem, OR.

Job Description

THE POSITION: Develops and maintains the framework for the organization's IT information security program. Evaluates and recommends new information security technologies and counter-measures against threats to information or privacy. Identifies information technology security initiatives and standards for the enterprise. Manages the development, implementation, and maintenance of information security policy, standards, guidelines, and procedures. Sets the access and authorization controls for everyday operations, as well as emergency procedures for data. Sets the standards for access controls, audit trails, event reporting, encryption, and integrity controls. Keeps abreast of latest security and legislation, regulations, advisories, alerts and vulnerabilities pertaining to IT assets. GENERAL STATEMENT OF DUTIES Plan, organize, manage, and administer information security programs, operations, and functions; develop and implement program and strategic planning; implement and assist in the development of information security program policies, procedures, and business practices; evaluate goals, objectives, priorities, and activities to improve performance and outcomes; recommend and establish administrative controls and improvements; develop procedures to implement new and/or changing regulatory requirements; serve as an advisor to the management team. SUPERVISION RECEIVED Works under general supervision of the IT Director who assigns work, establishes goals, and reviews the results obtained for overall effectiveness through the analysis of work products, observations, and meetings.
SUPERVISION EXERCISED The employee does not typically supervise, but facilitates and leads representatives from county departments and coordinates with IT Department personnel to achieve the objectives of the Information Security Program plan.
TYPICAL DUTIES - DUTIES INCLUDE, BUT ARE NOT LIMITED TO THE FOLLOWING:
Security Program Develops and maintains the framework for the organization's IT information security.
Evaluates and recommends new information security technologies and counter-measures against threats to information or privacy.
Identifies information technology security initiatives and standards for the organization.
Manages the development, implementation, and maintenance of the information security policy, standards, guidelines and procedures.
Sets the access and authorization controls for everyday operations, as well as emergency procedures for data handling.
Sets the standards for access controls, audit trails, event reporting, encryption, and integrity controls. Keeps abreast of latest security legislation, regulations, advisories, alerts, and vulnerabilities pertaining to IT operations.
Security Risk and Prevention Develops and implements an ongoing risk management program targeting information security and privacy matters; determines the methods for vulnerability detection and remediation, and oversees ongoing vulnerability testing.
Leads the information technology security assessments to identify risk due to changes or modifications to the computing environment.
Directs the security assessments/audits to identify vulnerabilities in security program and policies.
Controls testing of security procedures, mechanisms, and measures.
Collaborates with federal and state auditors, IT managers, and subject matter experts for satisfactory completion of compliance and program audits of the information security program.
Security Incident and Authoritative Contact Designated manager of security incident reporting and official responses to security incidents (breaches), responds to potential policy violations or complaints from external parties.
Leads the oversight and activities for intrusion detection and response.
Ensures the internal control systems are monitored and that appropriate access levels are maintained.
Investigates security breaches and develop after-action reports.
Acts as the designee representing the Information Technology Department on information security matters. Serves as the contact point for external auditors, survey requests, and for department security/privacy matters.
Initiates, facilitates, and promotes activities to create information security awareness and training throughout the organization.
Other Job Duties Participates in meetings, in-service training, workshops, etc. for the purpose of gathering information required to perform job functions.
Other duties as assigned.

Skills Required

Technology hardware and software which includes, but is not limited to systems, application languages, server based systems, cloud computing, personal computers, local and wide area network configurations and management, information/data management software and state-of-the-art system development and maintenance technologies; local, state, and federal laws, rules, policies, and regulations affecting information security and related technology and systems; strategic planning, preparation, and projection; and effective leadership and organizational communication principles and practices. Working knowledge of prevailing industry security standards and Common Body of Knowledge gained by way of CISSP, SANS, and/or CISA Certification(s).
Skills and abilities to: manage and oversee comprehensive information security programs; lead diverse technologies, employees, and customer groups; communicate effectively in writing and orally, including the ability to make public or staff presentations; establish and maintain effective working relationships with a variety of individuals and groups, including customers in high-stress situations; and assist in confidential investigations.
Skill in identifying information security problem areas, formulating diagnoses, and proposing practical solutions.
Deep understanding of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.
Ability to establish and maintain effective working relationships with employees, systems users, outside consultants and vendors.
The IT Security Analyst classification may require specific knowledge, experience, or skill sets based upon the technology, regulations, and business needs of the assigned county department.
This may include experience with specific types of information system technology, complex database management systems or various business application areas relevant to the departmental business function [e.g., various engineering application systems; health care related services and insurance/client billing systems; and protective services confidential database systems].

Skills Preferred

Certified Information Systems Security Professional (CISSP), or formal security certifications from (ISC) , GIAC, CompTIA, ISACA.
Information security principles and practices, including any of the following: security risk assessment standards, risk assessment methodologies, and vulnerability assessments.
Senior level knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, identity and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security software.

Experience Required

Five (5) or more years of progressive experience in computing and information security, including experience with Internet technology and security issues; OR
Any satisfactory equivalent combination of nine (9) years or more of education, training, and/or experience relevant to the position

Experience Preferred

Bachelor's degree from a four-year accredited college or university with major coursework in Computer Science, Information Technology or a related field; AND
Five (5) or more years of progressive experience in computing and information security, including experience with Internet technology and security issues; OR
Any satisfactory equivalent combination of nine (9) years or more of education, training, and/or experience relevant to the position.

Education Required

Bachelor's degree from a four-year accredited college or university with major coursework in Computer Science, Information Technology or a related field; AND.

Work Hours

Typical Work Schedule: Monday through Friday, 8:00 a.m. - 5:00 p.m., with flexibility depending upon the needs of the department and program.

Additional Information

NO REMOTE WORK
Must possess a current driver's license in the applicant's state of residence and an acceptable driving history.
Marion County will obtain a copy of the driving record for all qualified applicants from Driver and Motor Vehicle Services and review the driving record according to the Marion County policy and procedure for Driving on County Business.
The policy can be found at: http://apps.co.marion.or.us/APAP/.
The finalist for this position may be required to pass a criminal history background check, including fingerprinting; however, conviction of a crime may not necessarily disqualify an individual for this position.
This is a full-time position, which is not eligible for overtime.
This assignment is not represented by a union.

About Us

We are specialized in recruiting and deliver the best professional talent of industry and we are committed to deliver best experience for our clients and job seekers. With over two decades of experience in the recruitment industry, we proudly help you to find the next job that matches your professional skills. Our team understands your needs or requirement before starting the recruitment, that enables to find the high quality of talent with high success rate of talent delivery, keeps us continue to be the best in the industry.

Biogensys

New Jobs

IT Security Analyst - Direct Hire