Position: Information Security Analyst
Position location: Carson City, NV (Remote)
Duration: 1 Year
Agency: DMV
Position ID: 165361
Special Requirement:
- Experience and Skills Preferred-AI Security Framework Risk Assessments - NIST AI-100
- 100% remote
- Need W2 Candidates only
Position Description
Information Technology (IT) Professionals analyze, develop, implement, maintain, and modify computer operations, systems, networks, databases, applications, and/or information security. Incumbents may perform duties in one or more IT specialization areas depending on the needs of the agency.
Incumbents may perform supervisory duties and manage projects of varying size, scope, and impact to agency operations, including serving as the project leader; planning, organizing, and directing project activities; resolving design conflicts; data administration; resource allocation; contract negotiation; timeline development; critical path tracking; justifying the need for additional resources; and coordinating with other work units within and outside the organization as assigned.
Primary Responsibilities:
The primary responsibilities will be performing the duties of an Information Security Officer (ISO). Security functions include, but are not limited to:
- Support penetration testing.
- Conduct comprehensive assessments of management, operational, and technical security controls in accordance with the NIST Risk Management Framework (RMF).
- Determine the overall effectiveness of security controls using NIST 800-53 and Center for Internet Security (CIS) Controls.
- Assess security controls for on-premises and cloud environments, including:
- AWS
- Salesforce
- Mulesoft CSPs
- Generate and maintain required information security documentation, including:
- Systems Security Plans (SSP)
- Information Assurance Standard Operating Procedures (IA SOP)
- Continuous Monitoring Plans
- Security Control Traceability Matrices
- Risk Assessments
- Plan of Action & Milestones (POA&M)
- Equipment specifications, practices, and procedures
- Perform security audits and support external agency audits to ensure compliance with state and federal rules.
- Support security activities involving:
- Investigations
- Security awareness training administration
- Security access control recommendations
- Badge access administration
- Risk assessments
- Approval and authorization
- Anomalous activity detection and alert notifications
- Incident response
- Evaluation of software and hardware recommendations with related cost estimates
Special Requirements
- Current CISSP certification – Required
- Current PCI-DSS ISA certification – Required
- Current AWS Certified Security certification – Desired
- Salesforce Cloud Security Engineer certification – Desired
- Pre-employment criminal history check and fingerprinting are required. Candidates offered employment will be required to pay for these items.
- Work involves confidential information and requires onsite duties and functions.
Never miss an opportunity! Create an alert based on the job you applied for.