OAG - Enterprise Information Security | Cybersecurity Analyst III | 25-0016

United States Department of Justice - Austin, TX

Full-time - Mid Level

Austin, TX

1,001-5,000 employees

Justice, Public Order, and Safety Activities

About the position

The Cybersecurity Analyst III position within the Office of the Attorney General's Enterprise Information Security Team is a senior-level role focused on safeguarding the data and privacy of Texas citizens. This position involves implementing risk management programs, conducting assessments, ensuring compliance, and leading security strategies to protect against cyber threats. The analyst will engage in advanced cybersecurity analysis, incident detection, and response, while also supervising and mentoring other team members. The role emphasizes collaboration across departments to enhance security measures and promote a culture of cybersecurity awareness.

Responsibilities

• Lead security strategy by designing, automating, and deploying security applications and infrastructure.
• Develop and implement the overall information security program, including policies, standards, and risk management strategies.
• Collaborate on security plans and develop policies for data encryption and firewall configuration.
• Conduct and review risk assessments of systems and collaborate with users on access needs and security concerns.
• Monitor systems with automated tools to identify and mitigate vulnerabilities.
• Perform cybersecurity incident detection, analysis, and prevention.
• Manage access controls to prevent unauthorized data modification.
• Research and recommend programmatic and technical security directions for data breaches.
• Conduct periodic gap assessments to validate compliance with regulations.
• Lead security awareness training to empower users.

Requirements

• Graduation from high school or equivalent.
• Eight years of full-time experience in information technology security or closely related fields.
• Knowledge of information security, cyber security, and privacy issues.
• Skill in configuring, deploying, monitoring, and automating security applications and infrastructure.
• Ability to obtain and maintain approved baseline certification for the position (i.e., Security+).
• Ability to analyze program area functions and operations, identify areas needing change, and develop plans to improve programs.

Nice-to-haves

• Experience working with security management tools and perimeter technologies.
• Experience reviewing third-party contracts for cyber and information security compliance.
• Experience with IT GRC/IRM platforms (ServiceNow, OneTrust, etc.).
• Significant knowledge and experience with legal, privacy, and regulatory compliance standards such as HITRUST, HIPAA, ISO27001.

Benefits

• Health insurance coverage
• Dental insurance coverage
• Vision insurance coverage
• 401k retirement savings plan
• Paid holidays
• Flexible scheduling options
• Professional development opportunities