Junior Information Security Analyst

Drs It Solutions - Indianapolis, IN

Full-time - Entry Level

Remote - Indianapolis, IN

Professional, Scientific, and Technical Services

About the position

The Junior Information Security Analyst will work within the Information Technology Division of the Department of Child Services, focusing on auditing and monitoring systems that contain confidential information. This role is crucial for ensuring the safety of information systems assets and protecting these systems from both intentional and inadvertent access or destruction. The position requires the candidate to work in a hybrid model, with in-office work from Monday to Wednesday and the option to work remotely on Thursday and Friday. The candidate must currently reside in Indiana and be willing to work under a 1099 contract arrangement. The work schedule is flexible, with start times between 7:30 AM and 8:00 AM and end times between 4:30 PM and 5:00 PM. As a Security Analyst, the individual will monitor and keep their supervisor informed about the status of information security and confidentiality conditions, including identifying problem areas and recommending enhancements. They will interface with user customers to understand their security needs and implement procedures to accommodate them, which includes providing training and conducting assessments. The analyst will assist in preparing for security audits conducted by various agencies such as the IRS, SSA, OCSE, FBI, and SBOA, and will help remediate any findings from these audits. Additionally, they will be responsible for developing information security policies and standards to protect information systems in compliance with state and federal requirements, as well as creating Standard Operating Procedures (SOP) for implementing these security policies. The role also involves recommending appropriate security safeguards during the development of new information technology systems and legacy systems, ensuring maximum utilization of computer hardware and software features to secure automated systems and associated data. The analyst will develop and implement procedures for using information security management software, propose enhancements to security software, and perform periodic audits to ensure compliance with security policies and standards. Keeping abreast of new laws and changes affecting privacy standards, network security, cloud security, remote access, and physical security is essential. The analyst will also mentor and provide guidance to new or other staff as needed and perform related duties as assigned.

Responsibilities

• Monitor and keep supervisor informed of status of information security and confidentiality conditions, including problem areas and recommended enhancements.
• Interface with user customers to understand their security needs and implement procedures to accommodate them, including training and assessment.
• Assist with preparing for security audits (e.g. IRS, SSA, OCSE, FBI, SBOA) and remediating any findings; assist with creating and submitting reports relevant to security audits.
• Develop information security policies and standards for protection of information systems in compliance with state and federal requirements (e.g. IRS, SSA, OCSE, FBI, IOT) and guidelines (e.g. NIST SP 800-53).
• Develop Standard Operating Procedures (SOP) for implementing security policies.
• Recommend appropriate security safeguards to be included during development of new information technology systems and legacy systems.
• Ensure maximum utilization of computer hardware and software features to secure automated systems and associated data.
• Develop and implement procedures for use of information security management software.
• Propose information security software enhancements.
• Perform periodic audits to assure security policies and standards are being followed and are effective.
• Develop recommendations for enhancements and generate reports where necessary.
• Keep abreast of new laws and changes affecting privacy standards, network security, cloud security, remote access, and physical security.
• Mentor and provide guidance to new or other staff as needed.
• Perform related duties as assigned.

Requirements

• Thorough knowledge of information security management tools, policies, and standards of information security procedures.
• Thorough knowledge of state and federal legislation and regulatory laws pertaining to information system security and privacy.
• Thorough knowledge of software vulnerabilities, vulnerabilities scanning tools, and vulnerabilities remediation.
• Familiarity with domain structures, user authentication, and digital signatures.
• Ability to develop and maintain information security standards.
• Ability to understand and apply complex computer logic to work.
• Ability to work effectively with a wide range of information technologists, including systems administrators, technical support, application development, end users, and management.
• Experience in assessing security needs of teams and assist in their security training.
• Ability to communicate effectively both orally and in writing.
• Ability to be a team member as well as a team leader depending on the situation.

Nice-to-haves

• Degree in information security or technology preferred.
• Security certification preferred (e.g. CISSP).
• Network Admin experience preferred.