NYS DOT HBITS-06-13702 Mid-level Security Analyst (IT Security and Compliance)

Gcom Software - Albany, NY

Full-time - Mid Level

Albany, NY

Professional, Scientific, and Technical Services

About the position

The Mid-level Security Analyst position at Voyatek involves implementing information security and compliance programs for IT and OT systems, conducting risk assessments, and managing security threats. The role is crucial for ensuring that the organization's systems align with state and business information security policies, while also staying updated on industry trends and tools.

Responsibilities

• Implement information security and compliance programs for IT and OT systems.
• Conduct written risk assessments for existing and new systems/solutions.
• Assist with management and resolution of security threats to business information systems.
• Evaluate systems and contracts for alignment with business and state information security policies.
• Monitor information security industry trends, tools, and techniques.
• Perform additional duties as required.

Requirements

• 60 months experience implementing information security and compliance programs for IT and OT systems.
• 60 months experience conducting written risk assessments using industry standards such as NIST, CIS Critical Controls, ISO 27001, etc.
• 48 months experience triaging and determining mitigation plans to resolve security threats to business information systems.
• 48 months experience evaluating business systems for alignment with IT and OT information security policies.
• 36 months experience in securing cloud environments.
• 36 months conducting information systems security analysis using Secure System Development LifeCycle (SSDLC).
• Applicable Information Security or Information Technology certifications such as GSEC, GOCSP, CGEIT, CISA, CRISC, GCCC, Security+, Network+, CCSP, CSSLP, ISSAP, ISSEP, SSCCP, etc.
• Bachelor's Degree or higher in Information Security, Computer Science, Information Science, Information Assurance, Information System Management, Cybersecurity, Digital Forensics, IT Governance, Compliance and Risk Assessment.

Benefits

• Equal employment opportunities without regard to race, color, creed, ancestry, national origin, citizenship, sex or gender, gender identity or expression, sexual orientation, marital status, religion, age, disability, genetic information, service in the military, or any other characteristic protected by applicable laws.