IT PROFESSIONAL 3 - INFORMATION SECURITY

Conduct detailed alternative analyses and determine end-user requirements through consultation with end-users, technicians, vendors, management, and others.

Maintain documentation related to the assigned IT specialization’s architecture, operations, and other records of work activities as required.

Maintain current knowledge of technological trends and advancements in the IT field as well as security management practices, laws, policies, and ethics.

Participate in recommending and justifying resource allocations and expenditure decisions, tracking, and recording expenditures, preparing purchase requests, and writing technical requirements for grant proposals.

Perform related duties as assigned.

Under general direction, incumbents perform advanced journey level duties and may train, supervise, and evaluate the performance of subordinate staff and/or serve as a project leader as assigned. Incumbents may function as a unit leader to include directing the activities of a branch IT support unit, overseeing projects of limited scope, and coordinating activities with other work groups. This is a supervisory level for Computer Operations and the journey level for Information Security positions.

Bachelor’s degree from an accredited college or university in computer science, management information systems, or closely related field and three years of professional IT experience relevant to the duties of the position which may include computer operations, systems administration, network administration, database administration, applications analysis and development, and/or information security, one year of which was at the journey level; OR one year of relevant experience as an IT Professional II in Nevada State service; OR an equivalent combination of education and experience as described above., * Active certification as a Nevada Information Security Professional (NISP) is required.

• Information Security program experience is required.
• Risk management and incident response experience is required., Working knowledge of: three of the ten security domains; current principles, theories, practices, and procedures of information security management.

General knowledge of: general-purpose security controls; current information security trends and technologies.

Ability to: develop plans to safeguard against accidental or unauthorized modification, destruction or disclosure of data to meet security needs; assess costs and present alternatives for the assigned area of responsibility; participate in long-term projects and strategic planning; organize resources and materials in order to meet project timelines; assess the security and/or vulnerability of information assets to assist in developing a risk assessment; analyze data, solve problems and make appropriate decisions within three of the ten domains; provide effective and responsive customer service; establish and maintain positive working relationships with others; develop and implement information security training materials and workshops.

Skill in: technical writing, report preparation and oral communication.