Information Security Risk Analyst

Demonstrated operational security support experience in a Software as a Service (SAAS) solution.
Supports the implementation of Mosaic complete security profile, including, but not limited to:
Mosaic User Security Role
Experience working with modern issue tracking systems (JIRA)
Experience with common information security management frameworks, such as [International Organization for Standardization (ISO) 2700x and the ITIL, COBIT and National Institute of Standards and Technology (NIST)] frameworks
enterprise security best practices, including but not limited to IAM, RBAC, Network Security, SaaS, Cloud Security, Data Security, Encryption, and File transfer management.
Experience working with modern issue tracking systems (JIRA)
Performs a configuration update and execution role in application development and implementation related to security requirements and controls, ensures that security controls are implemented as planned and that security and access needs are addressed throughout the User life cycle.
Iimplement security processes and procedures that ensure security controls are managed and maintained both centrally through the new solution, and within agencies if certain security management tasks are decentralized.
The Security Analyst will work with the BEST Team, agencies, and SI and product vendors to identify the end-user roles and permissions that will be needed to implement the new Financials solution in multiple agencies and across multiple user types in a manner that ensures appropriate access to data by these parties. Procedures for rolling out user security will be developed in conjunction with the SI and product vendors, CTR, EOTSS, and agency staff currently responsible for provisioning and de-provisioning users of the Mosaic application.

Please submit for more detailed JD.