Enterprise Security Analyst

The purpose of this role is to ensure the security and integrity of County sites, data centers and infrastructure across the organization. This includes assessing, managing, and training in physical and cyber security. The Enterprise Security Analyst will also play a key role in the health and continuity of IT operations., The functions listed below are those that represent the majority of the time spent working in this class. Management may assign additional functions related to the type of work of the class as necessary.

• Implement, assess, manage, secure, and provide technical leadership and administration for physical security technologies in use at all County facilities.
• Assess need for any physical and cyber security improvements, reconfigurations, and upgrades (minor or significant) and execute them if required.
• Assist in maintaining CJIS and FIPS compliancy for all County systems.
• Perform security audits as directed by management.
• Assist in correcting findings from incidents, penetration tests and other security-related audits.
• Test network security controls; coordinate remediation efforts and closure of any identified issues.
• Ensure systems and controls are in place to support both best practices and the County’s information security policy and standards.
• Act as first line of support for triage and remediation of support tickets related to security; track ongoing support issues.
• Stay current with IT security trends and standards.
• Stay current on released security features of internal IT systems.
• Maintain confidentiality and integrity in dealing with sensitive information.
• Facilitate end user security training.
• Conduct risk assessments and business impact analysis to identify vulnerable areas within the County’s critical functions.
• Performs related work as assigned.

Enterprise Protection, Security Analysis, Security Analysis, Internet Security, Enterprise Protection, Network Operations Center, Business Continuity Planning (BCP), Physical Security, Technical Leadership, Federal Information Processing Standards (FIPS), * Requires a bachelor’s degree in computer science, information systems, cybersecurity, or a related major.

• Requires two years of experience in information systems security systems and/or network and infrastructure.
• Understanding of firewalls, network switches, SIEM, antivirus, and IP concepts required.
• Experience with penetration testing and security assessments preferred.

Special Certifications and Licenses:

• Requires CJIS level 4 certification.
• Valid TX Driver’s License
• Must maintain CJIS compliance

Build your career with The County of Galveston, where your health and well-being matter! As a benefit-eligible employee, you will enjoy:

• Flexible, comprehensive health benefits with multiple plan choices, including $0 premium options
• Full family coverage options for medical, dental, and vision
• Strong retirement security through TCDRS with generous 200% county matching (once vested & retirement eligible)
• County paid term and whole life insurance policies and long-term disability
• Work-life balance through paid time off, holidays, and other wellness initiatives
• Supportive networks through EAP and Marketplace Care Partners

Department: Information Technology

Salary: $74,702.00