Information Security Analyst

Under direction, assist with the development, documentation, and maintenance of information security policies, procedures, and standards which align with business goals and objectives across city departments.

Typical Duties

Analyze information security processes and coordinate solutions with Department of Information Technology Services and City departments. Involves: Under direction, being actively engaged in identifying unique system configurations, interviewing key organizational personnel (technical and administrative), working with the Information Security Assurance Manager to develop standard information security documentation (security categorizations, risk assessments, contingency plans, security test & evaluation reports, vulnerability assessment reports, etc.), and adjust capabilities to prescribed information security controls and countermeasures to mitigate risk to acceptable levels.

Develop, document, and enforce security policies, standards, guidelines, processes, and procedures to support the enterprise security posture. Involves: Updating, maintaining and documenting security controls. Assisting in hardening operating systems, devices and access systems builds. Assisting in the development of data systems, network security architecture security risk analysis scenarios, and response procedures. Administering security tools, security event monitoring, alerting, and reporting. Implementing a Business Continuity and Disaster Recovery Plan for the organization.

Monitor and report on the status of the information security processes. Involves: Evaluate, design, monitor, implement, administer information security systems. Process requests to design, modify and grant security accesses, and other security requests. Perform troubleshooting and end-to-end support on a variety of information security systems software. Prepare status reports on security matters and review security violation reports and investigate possible security exceptions. Represent the security needs of the organization.

Education and Experience: A Bachelor’s Degree or higher in information technology, management information systems, computer science, accounting, finance, economics, business administration or a related field and four (4) years of information technology and/or Physical Security experience; at least 2 of which were in network/server management or physical access systems.

Licenses and Certificates: Valid Texas Class “C” Driver’s license or equivalent issued by another state required by time of appointment. Any one of the following industry certifications will be required within twelve (12) months from date of appointment; GSEC, GCIH, or GCIA.

Special Requirements: Applicants for this position must pass a Criminal Justice Information Systems (CJIS) finger-print based background check and maintain CJIS eligibility. Due to CJIS requirements related to system access, the following will result in being disqualified for this position: Felony Convictions, Felony Deferred Adjudication, Class A & B Misdemeanor Deferred Adjudication, Class B Misdemeanor Convictions, an Open Arrest for Any Criminal Offense (Felony or Misdemeanor), and Family Violence Convictions.