Information Security Analyst

Applicants must be authorized to work in the United States without the need for employment-based visa sponsorship now or in the future. The employer does not provide visa sponsorship for current, continued, or future work authorization.

• All interviews are in-person / on-site.
• Travel expenses will not be provided for in-person interviews.

• This position is in-person / on-site only. Remote work is not authorized. Please no agencies - direct applicants only. *, Reporting to the Information Security Manager , the Information Security Analyst is responsible for assisting with the administration of and providing operational support for the information security program of the Administrative Office of the Courts., Position Description: Responsibilities include researching current and emerging security risks and proposing mitigation strategies, leading security-related projects and participating as a security representative in other MIS projects, providing non-supervisory leadership and mentoring to other security department personnel, assisting in the design of security policy and procedures, training, and awareness activities, monitoring compliance with IT security policy and applicable law, and assisting in the investigation and reporting of security incidents. The Information Security Analyst will also coordinate the identification and remediation of all security issues. This also includes participating in network penetration tests, application vulnerability assessment scans, PCI Compliance, and risk assessment reviews., * Monitor information security issues related to systems and workflow to ensure the internal security controls are appropriate and operating as intended.

• Administer security hardware and software such as antivirus, web filtering, and encryption solutions.
• Coordinate and execute IT security projects, including implementation of new technologies and efforts to improve general security posture.
• Respond to security incidents following established policies and procedures.
• Provide technical expertise and support for security-related issues throughout the organization.
• Collaborate with IT management and technical resources as needed to remediate security vulnerabilities identified during risk assessments, penetration tests, and application reviews.
• Coordinate the development of Information Security policies, procedures, standards, and guidelines based on knowledge of best practices and compliance requirements along with coordinating with facilities to ensure all use same industry standards.
• Assist in the development and delivery of user security awareness notifications.
• Develop security awareness by providing orientation, educational programs, and on-going communication working with Training Coordinator on regular notices to end users. Prepare documentation, including department policies and procedures, notifications, metrics, and alerts.
• Perform security quality assurance activities for datacenter and networking equipment.
• Participate in security-targeted testing of software applications.
• Ensure authorized access by investigating improper access, revoking access, reporting violations, monitoring request and process.
• Conduct security research to keep abreast of latest security issues.
• Provide backup support for Security Department personnel.
• Support the development and ongoing monitoring of the Security Operations Center (SOC) Perform other related duties as assigned. *

• Knowledge of information security frameworks (e.g., NIST CSF, etc.), rules and regulations related to information security and data confidentiality (e.g., PCI) and desktop, server, application, database, network security principles for risk identification and analysis.
• Experience with process improvement to include researching, assessing risk, and developing mitigation strategies for security threats.
• Experience with Firewall Administration, Active Directory, Microsoft operating systems, networking routers/switches, and security tools such as antivirus software, web and e-mail filtering, encryption technology, and access control systems.
• Knowledge of network protocols and security policies.
• Experience with project management.
• Strong analytical and problem-solving skills. Excellent communication (oral, written, presentation), interpersonal and consultative skills. *

Education and Experience Requirements:

• Bachelor’s degree in computer science, Management Information Systems, or related field, or equivalent experience (5-7 years).
• Four or more years of progressive security experience in computing and information security, including experience with Internet technology and security issues. Experience in court systems preferred.
• Certifications: Certified Ethical Hacker (CEH), CompTIA Security+ Experience working on large priority projects as a team member. *

Travel: All AOC positions have the potential to and expectation of requiring employees to travel for normal duties in support of the Judiciary, including and not limited to state Judicial events and national industry conferences., Physical Demands: While performing the duties of this job, the employee is regularly required to talk, hear, comprehend, observe, and evaluate. Specific vision abilities required by this job include close vision and ability to adjust focus. This position requires the ability to lift files, open filing cabinets, operate standard office and computer equipment, and bend or stand on a step stool as necessary.

Responsibilities and skills listed above are essential to the position. Inability to perform these responsibilities with or without an accommodation may result in disqualification from the position.

Eligibility: Applicants must be authorized to work in the United States without the need for employment-based visa sponsorship now or in the future. The employer does not provide visa sponsorship for current, continued, or future work authorization.

Salary: Commensurate with education and experience.

All AOC positions are designated as “In-Person” at one of the authorized work locations. AOC offices are officially open for business from 8:00 AM to 5:00 PM, Monday through Friday.

MIS employees have the expectation of being assigned on-call as defined in 26 CFR 553.221 (d) in support of judicial operations.