IT Information Security Analyst, Senior

These examples do not include all possible tasks in this work and do not limit the assignment of related tasks in any position of this classification. Regular attendance according to the position’s management approved work schedule is required for all positions. Strategy & Planning:

• Research and stay informed of potential information security threats, industry trends, emerging technologies, and response alternatives.
• Recommend improvements to county information security policies, procedures, and guidelines.
• Assess, monitor, and assist with recommended improvements to county security procedures for user access creation, modification, and removal.
• Conduct research and provide insight to identify, assess, and deploy security technology solutions at the county and through vendors, including but not limited to encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
• Assist with approval, tracking and reporting any security exceptions as the need arises.
• Prepare status reports on security matters to analyze security risk and response of vendor security controls.
• Monitor and proactively recommend solutions for correcting issues related to security technology performance and capabilities of vendors.
• Collaborate on critical technology projects to ensure that security issues are addressed throughout the project life cycle.
• Assist with recommendations for security improvements and tool acquisition to County Board and Senior Management.

Acquisition & Deployment:

• Assist in the evaluation and use of security technologies and tools.
• Provide insight on the deployment of security technology solutions, which may include technology for encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
• Work with auditors to demonstrate processes and ensure appropriate levels of access are applied throughout the information and identify lifecycles.
• Participate in planning, selection, and implementation of an identity management solution.
• Work in an advisory role in application development or acquisition projects to assess security requirements and controls to ensure that security controls are implemented as planned.

Operational Management:

• Maintain, manage and monitor county compliance with security control frameworks such as the CJIS Security Policy, HIPAA, IRS Tax 1075, PCI-DSS and other state statutes and federal law.
• Engage in regular assessment of the current IT security environment to identify weaknesses and work with IT management to develop opportunities for improvements such as reducing complexity, reducing time and cost, and increasing effectiveness.
• Serve as a technical subject matter resource providing expertise in the security domain and provide technical direction to lead appropriate work on security related projects.
• Lead, facilitate, analyze, execute, govern and represent plans or identified approaches for contracted security assessments, driving remediation through partnering with internal and external business and I.T.
• Participate in the assessment of potential threats and risks to County systems and management of those risks.
• Weigh business needs against security concerns to articulate issues and recommend options.
• Participate in the design, development, and delivery of security training programs and individual classes.
• Other duties as assigned.

The Information Security Analyst, Senior, is a high-level technical expert in the security domain and will work with Dakota County Information Technology (I.T.) management and staff to set and monitor Dakota County security standards, best practices, and systems necessary to ensure the protection and confidentiality of County informational assets. This analyst must possess strong technical knowledge of information systems, I.T. security practices and technologies, the use of established I.T. security controls and methods, and a working knowledge of public policy issues and concerns related to government I.T. security and privacy and relevant law. The incumbent must also possess excellent communication skills and the ability to develop and maintain effective interpersonal relationships with Dakota County managers, internal and external technical staff, and representatives of outside governmental agencies

Minimum Qualifications Bachelor’s degree in computer science, information systems, or information security and 3 years’ work experience supporting IT security infrastructure;

OR

Associate degree in computer science, information systems, or information security and 5 years’ work experience supporting IT security infrastructure;

OR

A combined 7 years of equivalent education and experience in IT security infrastructure.

PREFERRED QUALIFICATIONS BEYOND MINIMUM REQUIRED:

• Certified Information Systems Security Professional (CISSP)
• CompTIA Advanced Security Practitioner (CASP+)
• Certified Security Analyst (CSA), * Knowledge of technological trends and developments in technology relating to security and risk management.
• Strong understanding of information security controls, risks and threats,
• Understanding of and experience with network protocols including switches, routers and routing technologies.
• Strong working knowledge of Microsoft Windows Server environments, VMWare Server, Microsoft M365, Veeam Backup, and other enterprise-wide applications.
• Strong knowledge of enterprise security technologies, e.g., Virtual Private Network (VPN), Encryption, Firewalls, Intrusion Detection/Prevention, and Anti-Virus.
• Knowledge of information security standards, data privacy laws, computer crime laws, and state and federal data protection laws, etc.
• Knowledge of information security audit and assessment methodologies, policies, standards, procedures and best practices.
• Ability to conduct risk management assessments; provide assistance in identification, prioritization and remediation of information systems vulnerabilities to diverse users.
• Business process and reengineering experience.
• Proven knowledge of systems development life cycle methodologies.
• Familiarity with national security standards organizations and industry leaders in security excellence.
• Ability to work in a flexible environment where requirements and procedures continuously evolve

Personal Attributes:

• Highly self-motivated and self-directed.
• Ability to absorb new ideas and concepts quickly.
• Strong analytical and trouble-shooting abilities.
• Has a keen attention to detail.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Ability to make technical decisions with limited resources and precedence.
• Very strong customer service orientation.
• Strong written, oral, interpersonal, and presentational skills.
• Experience working in a team-oriented, collaborative environment.
• Ability to use discretion and handle sensitive/confidential information

• Comprehensive and affordable medical, dental, vision, and other benefits
• Excellent work-life balance
• Generous paid time off
• Eleven paid holidays and one floating holiday each year
• Pension with a generous employer contribution
• Ability to work from home some of the time

Selection Process

Dakota County is Minnesota’s third largest county and home to more than 400,000 residents. We strive every day to achieve excellence public service, with a focus on four values: Service, Integrity, People, and Innovation.

Dakota County aims to create an environment that is welcoming and inclusive of diverse people, backgrounds, and experiences. Our goal is to have a workforce that is reflective of the communities and individuals we serve. We promote an equitable and culturally aware work environment where everyone can be their authentic selves.