Senior IT Security Analyst (ERB #10111062)

The Senior IT Security Analyst is responsible for working with the CIO, Deputy CIO, ERB management, security audit partners, and vendor technical teams to ensure the New Mexico Education Retirement Board (ERB), is in compliance with all information security requirements. How does it get done?

The incumbent will lead the agency’s information security program across a hybrid enterprise environment, protecting the pension administration system that serves New Mexico educators. Key responsibilities include: securing AWS cloud infrastructure, hosted services, and VDI environment; overseeing Fortinet physical and virtual firewall administration, network segmentation, and secure wireless infrastructure; managing Web Application Firewall (WAF) configurations and web application security for hosted systems, including the pension administration platform; leading vulnerability management, threat mitigation, and remediation across cloud, Windows and Linux servers, virtual machines, and endpoints; monitoring security events through Endpoint Detection and Response (EDR) tools and coordinating incident detection, triage, containment, and response; conducting security audits, risk assessments, and compliance reviews; developing and maintaining IT security policies, standards, procedures, and the Computer Security Incident Response Plan (CSIRP); coordinating with the CIO, Deputy CIO, ERB management, security audit partners, and vendor technical teams to ensure compliance with information security requirements; and contributing to disaster recovery, business continuity, and security awareness initiatives. Who are the customers?

The CIO, the IT department, and the agency as a whole.

Bachelor’s degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and three (3) years of experience in IT security or compliance validation (e.g., HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling seven (7) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g., CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g., PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience. Employment Requirements

Must possess and maintain a valid New Mexico Driver’s License. Must possess and maintain a current Defensive Driving Certificate from the State of New Mexico or must pass and receive Defensive Driving Course Certification as a condition of continued employment. Pre-employment background investigation is required and is conditional pending results Working Conditions

Work will be performed in an office environment. Many requests will arrive via helpdesk ticketing system, phone or in-person. The person must be able to speak and respond to the requester clearly. The person will work extended periods seated in front of a computer. The person must be able to operate a computer, keyboard, and mouse. Supplemental Information

3.53.5 out of 5 stars 715 Alta Vista St, Santa Fe, NM 87505 $36.43 - $54.65 an hour - Full-time