Overview
Skills
Job Details
Job Title
GIS IT Security Specialist
(Also known as: Geospatial Security Analyst, GIS Cybersecurity Engineer)
Job Summary
The GIS IT Security Specialist is responsible for securing Geographic Information Systems (GIS), geospatial data, and supporting infrastructure against cyber threats. This role combines cybersecurity best practices with GIS platform administration to ensure the confidentiality, integrity, and availability of spatial data, applications, and services.
Key Responsibilities
GIS & System Security
Design, implement, and maintain security controls for GIS platforms (e.g., ArcGIS Enterprise, ArcGIS Online, QGIS, PostGIS).
Secure geospatial databases, map services, web GIS applications, and APIs.
Manage authentication, authorization, and role-based access control (RBAC) for GIS users.
Ensure secure integration between GIS systems and enterprise IT infrastructure.
Cybersecurity & Risk Management
Identify, assess, and mitigate security risks related to geospatial systems and data.
Monitor GIS systems for vulnerabilities, intrusions, and suspicious activity.
Conduct regular security audits, penetration testing, and vulnerability assessments.
Develop and enforce GIS-specific security policies and procedures.
Compliance & Data Protection
Ensure compliance with organizational, regulatory, and legal requirements (e.g., ISO 27001, NIST, GDPR, CJIS, HIPAA where applicable).
Classify and protect sensitive or restricted geospatial data.
Implement encryption for data at rest and in transit.
Incident Response & Recovery
Respond to security incidents affecting GIS systems.
Perform root cause analysis and implement corrective actions.
Support disaster recovery and business continuity planning for GIS services.
Collaboration & Support
Work closely with GIS analysts, developers, IT infrastructure teams, and security operations.
Provide security guidance during GIS application development and deployment.
Train GIS users on security awareness and best practices.
Required Qualifications
Education
Bachelor s degree in GIS, Information Security, Computer Science, Information Technology, or a related field
(or equivalent experience)
Experience
3+ years of experience in IT security, cybersecurity, or system administration
1 2+ years working with GIS platforms or geospatial data environments
Technical Skills
GIS platforms: ArcGIS Enterprise/Online, QGIS, or similar
Cybersecurity tools: SIEM, IDS/IPS, vulnerability scanners
Identity & access management (IAM)
Network security, firewalls, VPNs
Databases: SQL Server, PostgreSQL/PostGIS, Oracle
Operating systems: Windows Server, Linux
Scripting: Python, PowerShell, or Bash (preferred)
Preferred Certifications
GIS: Esri Technical Certification
Security: CISSP, CISM, Security+, CEH
Cloud (if applicable): AWS, Azure, or Google Cloud Security certifications