Information Security Analyst II

Responsible for maintaining, assessing, and strengthening the overall information security posture of the Wake County Public School System (WCPSS). Directs and executes operational security controls, conducts technical vulnerability assessments, leads escalated incident investigations, and performs governance, software privacy, and risk reviews. Independently oversees multi-faceted security projects with minimal supervision and serves as a technical mentor to Level I Analysts under the direction of the Information Security Officer., 1. Identifies, validates, and remediates security vulnerabilities using enterprise security tools (e.g., Nessus, OpenVAS); recommends operating system and network hardening controls.

1. Investigates escalated security alerts, data breaches, and complex cybersecurity incidents; conducts initial case triage and field forensic analysis.
2. Performs technical security assessments, internal audits, and software privacy reviews as part of the district software approval process.
3. Plans and leads independent cybersecurity projects, technology implementations, and system integrations with minimal oversight.
4. Develops and updates district-wide security awareness training materials, phishing simulation content, newsletters, and security runbooks.
5. Monitors system anomalies, configures access controls, and enforces policies to protect WCPSS confidential and sensitive data.
6. Serves as a technical resource and mentor to Level I Analysts on complex support tickets and technical issues.
7. Complies with all WCPSS standards, procedures, and internal reporting structures.
8. Performs other related duties, as assigned.

KNOWLEDGE, SKILLS, AND ABILITIES (KSAs)

• Extensive knowledge of Microsoft Office, specifically Word, Excel, and PowerPoint; Google Apps;
• Extensive knowledge of enterprise operating systems (Windows, Linux/UNIX, Chrome OS, Mac OS), active directory/directory services (AD, LDAP), and identity management;
• Extensive knowledge of foundational information security principles, threat modeling, and risk management frameworks.
• Comprehensive knowledge of computer networking fundamentals, TCP/IP protocols, firewalls, and routing/switching.
• Considerable knowledge of application and operating system hardening, vulnerability scanning, and intrusion detection/prevention tools.
• Considerable knowledge of digital forensics tools and processes, as well as packet analysis tools.
• Strong troubleshooting, analytical, and problem-solving skills to investigate security events and identify root causes.
• Strong interpersonal skills;
• Demonstrated ability to independently plan, manage, and execute multi-faceted security projects and technical tasks with minimal oversight.
• Ability to translate complex technical concepts into clear explanations for non-technical school staff, instructional stakeholders, and leadership.
• Ability to communicate clearly and concisely both in oral and written form using a variety of communication techniques and tools to ensure the appropriate flow of information, collaborative efforts, and feedback;
• Ability to establish and maintain effective working relationships with school system staff, across TSD teams, school administrators, vendors, and external partners., * Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Computer Engineering, or a directly related field;
• Five years of experience in the field of information security or information technology;
• An equivalent combination of relevant education, training, and experience which provides the required knowledge, skills, and abilities may be considered.

CERTIFICATION AND LICENSE REQUIREMENTS

• CompTIA Security+, CompTIA CySA+, or other mid-level industry certifications;
• Must hold and maintain a valid motor vehicle operator’s license according to the State of North Carolina requirements.

PREFERRED QUALIFICATIONS:

• Two years in a K-12 or public-sector environment with scripting experience (Python, PowerShell), enterprise security tools (Nessus, EDR/SIEM), cloud security (Microsoft 365, Google Workspace), and vendor software privacy evaluations;
• Holding or actively pursuing mid-to-senior credentials (e.g., SSCP, GIAC, CEH, or active progress toward CISSP/CISM)., This role routinely uses standard office equipment such as computers, scanners, and copiers. The position, at times, must be able to come into direct contact with school system staff, students, and the community. Work at times requires the ability to lift, carry, push, pull, or exert up to ten pounds. Physical requirements are consistent with those for light work. The work occasionally requires driving automotive equipment.