OAG - Enterprise Information Security | Cybersecurity Analyst III | 25-0016

$84,182 - $88,856/Yr

United States Department of Justice - Austin, TX

Full-time - Senior

Austin, TX

1,001-5,000 employees

Justice, Public Order, and Safety Activities

About the position

The Cybersecurity Analyst III position within the Office of the Attorney General's Enterprise Information Security Team is a senior-level role focused on safeguarding the data and privacy of Texas citizens. This position involves implementing risk management programs, conducting assessments, ensuring security compliance, and leading security strategies to defend against cyber threats. The analyst will engage in advanced cybersecurity analysis, oversee contract reviews, and develop security standards and business continuity plans, all while collaborating with various stakeholders to enhance the agency's security posture.

Responsibilities

• Lead security strategy by designing, automating, and deploying security applications and infrastructure.
• Develop and implement the overall information security program, including policies, standards, risk management, and risk reduction strategies.
• Collaborate on security plans and develop policies for data encryption and firewall configuration.
• Conduct and review risk assessments of systems and collaborate with users on access needs and security concerns.
• Monitor systems with automated tools to identify and mitigate vulnerabilities.
• Perform cybersecurity incident detection, analysis, and prevention.
• Manage access controls to prevent unauthorized data modification.
• Research and recommend programmatic and technical security directions and solutions for data breaches.
• Conduct periodic gap assessments to validate compliance with regulations.
• Lead security awareness training to empower users.

Requirements

• Graduation from high school or equivalent.
• Eight years of full-time experience in information technology security or closely related fields.
• Knowledge of information security, cyber security, and privacy issues.
• Skill in the use of applicable software for configuring, deploying, monitoring, and automating security applications.
• Ability to analyze program area functions and operations, identify areas needing change, and develop plans to improve programs.

Nice-to-haves

• Experience working with security management tools and perimeter technologies.
• Experience reviewing third-party contracts for cyber and information security compliance.
• Experience with IT GRC/IRM platforms such as ServiceNow or RSA Archer.
• Significant knowledge and experience with legal, privacy, and regulatory compliance standards.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• 401k retirement plan
• Paid holidays
• Flexible scheduling
• Professional development opportunities