IT Security Specialist (DWS#51098)

The New Mexico Department of Workforce Solutions strives to be a leader in improving employment and positive economic outcomes through workforce development, enhanced services for employers, and ensuring fair labor practices and workforce protections for New Mexicans.

The Workforce Technology Division (WTD) provides a full range of information technology services and support to the DWS, strategic business partners, and customers. WTD is an essential component of the Agency delivering critical services to the state’s citizens and business community. The mission of WTD is to exceed our customer’s expectations in terms of quality, timeliness, and responsiveness through cost effective, schedule compliant, reliable and secure leveraging of IT resources. The core of our work requires operating and maintaining a robust, secure information technology (IT) infrastructure, comprised of all enterprise operational systems. WTD is responsible for promoting operational excellence through stable and reliable systems hosted on current equipment and systems software products; providing timely delivery of standard IT products and services; providing timely restoration of service following service interruption; and providing necessary supporting modification and enhancements to accommodate legislative mandates, regulatory changes, and evolving system user requirements.

NMDWS Participates in E-Verify. NO SPONOSRSHIP Provided. Why does the job exist?

The purpose of this position is to ensure the protection of the Agency’s IT infrastructure, networks, and systems from potential threats, such as cyber-attacks, data breaches, and malicious software. This position manages and responds to a range of federal and state required compliance audits. How does it get done?

The Chief Information Security Officer (CISO) accomplishes this work through strong cybersecurity leadership, policy development, operational oversight, collaboration, and decisive coordination of security issues. The position must be able to develop, interpret, and implement clear cybersecurity policies, standards, and procedures and apply applicable federal and industry requirements, including NIST SP 800-53 and IRS Publication 1075, to the Agency’s security program.

The CISO works in a dynamic and evolving technology environment, continuously assessing changes in technology, emerging threats, vulnerabilities, regulatory requirements, and business needs and adjusting priorities and security practices accordingly. The position uses enterprise security tools such as Palo Alto Cortex XSIAM, AWS GuardDuty and CloudWatch, and Microsoft Defender to monitor the environment, identify threats and vulnerabilities, and coordinate timely responses.

When issues are identified, the CISO works collaboratively with Infrastructure, DevOps, cloud, application, and other technical teams to establish priorities, direct remediation through the Agency’s ticketing and tracking processes, maintain accountability, and ensure issues are resolved and verified. The position requires a strong sense of urgency and ownership, particularly when addressing active threats, significant vulnerabilities, compliance findings, or issues affecting critical systems.

The CISO is also responsible for effectively managing and supporting security assessments, audits, and compliance reviews, including preparing documentation and evidence, coordinating responses to auditor requests, addressing findings, developing remediation plans, and tracking corrective actions through completion. The position works closely with internal and external auditors, federal partners, other state agencies, and cybersecurity colleagues to coordinate assessments, share information, address requirements, and strengthen the Agency’s overall security posture.

The position works collaboratively with the CIO and executive staff by providing clear reporting, risk assessments, recommendations, and status updates that support informed decision-making. Success requires a candidate who can write and implement effective policy, understand and apply NIST and federal security requirements, confidently manage audits and assessments, operate effectively in a fast-changing environment, communicate with technical and executive audiences, build productive relationships across agencies and with federal partners, and drive cybersecurity issues from identification through resolution. Who are the customers?

The direct customers are Agency executives and State cybersecurity oversight bodies. Additional secondary customers are the Federal compliance officers. Overall this work is done to ensure the protection of the staff and citizens of New Mexico from any data disclosures or compromise of mission critical systems. Ideal Candidate

The direct customers are Agency executives and State cybersecurity oversight bodies. Additional secondary customers are the Federal compliance officers. Overall this work is done to ensure the protection of the staff and citizens of New Mexico from any data disclosures or compromise of mission critical systems. Minimum Qualification

Bachelor’s degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and six (6) years of experience in IT security and compliance. Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling ten (10) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g. CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g. PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience. Employment Requirements

Must possess and maintain a valid Driver’s License. Must possess and maintain a current Defensive Driving Course Certificate from the State of New Mexico or must pass and receive Defensive Driving Course Certification within six (6) months of date of hire as a condition of continued employment.

Employee must complete a background check. Working Conditions

Work is performed in office setting and or through remote access trough VDT. Supplemental Information