> Markdown version of [/jobs/ext/1305778-it-security-analyst-cyfd-itd-10118952](https://www.wearedevelopers.com/jobs/ext/1305778-it-security-analyst-cyfd-itd-10118952). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Analyst (CYFD/ITD #10118952) - **Company:** State of New Mexico - **Location:** Albuquerque, NM, United States - **Salary:** $68,890.0 - $103,334.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Information Systems, Computer Literacy, Identity and Access Management, Virtual Private Networks (VPN), Network Security, Cloud Services, Software Vulnerability Management, Enterprise Software Applications, Firewalls (Computer Science), Web Filtering, Information Technology - **Published:** July 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=bc938843b8885835 ## About the Role Bachelor's degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and two (2) years of experience in IT security or compliance validation (e.g., HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling six (6) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g., CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g., PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience. Employment Requirements Must possess and maintain a valid Driver's License. Pre-employment background investigation is required and is conditional pending results. Working Conditions Work is performed in an office setting with exposure to Visual/Video Display Terminal (VDT) and extensive phone and personal computer usage. Direct client interaction and some travel may be required. Supplemental Information ## Description This position exists to support CYFD's implementation and ongoing compliance with SB42 by ensuring the security, protection, retention, and governance of electronic records and information systems. The position provides cybersecurity, risk management, compliance, and audit support to help safeguard sensitive agency data and ensure compliance with state and federal requirements. How does it get done? 20% -Lead SB42 cybersecurity compliance activities, including monitoring compliance with electronic records retention, security, governance, and data protection requirements. 15% -Conduct cybersecurity risk assessments, security reviews, compliance evaluations, and third party/vendor security assessments for enterprise systems, cloud services, AI technologies, and applications. 15% -Develop, implement, and maintain cybersecurity policies, standards, procedures, governance documentation, and security controls to support SB42 and regulatory compliance. 15% -Administer, monitor, and optimize enterprise security technologies, including next generation firewalls, web filtering, intrusion prevention systems (IPS), VPNs, and network security controls to protect CYFD systems and data. 10%- Support security operations by monitoring security events, investigating alerts, coordinating incident response activities, vulnerability management, and remediation efforts. 10% -Coordinate audit readiness activities, compliance reporting, evidence collection, corrective action plans, and collaboration with DoIT, Legal, Privacy, Procurement, and internal CYFD stakeholders. 10% -Support identity and access management, security architecture reviews, secure configuration standards, and implementation of technical security controls across the enterprise. 5% -Promote cybersecurity awareness, governance initiatives, security metrics, and continuous improvement efforts to strengthen CYFD's overall security posture. Minimum Qualification ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Lies, Damned Lies and Large Language Models](https://www.wearedevelopers.com/videos/1231-lies-damned-lies-and-large-language-models) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)