Job Title: Information System Security Officer/Risk Analyst
Location: Austin TX (Hybrid 2 days onsite)
Duration: 1224 Months
Interview: Webex
The ideal candidate will be responsible for conducting a comprehensive assessment of the management operational and technical security controls employed within or inherited by the information systems to determine the overall effectiveness of the controls.
Qualifications/Requirements:
- At least 5 years of experience in common information security and risk management frameworks
- Security certification (at a minimum) is required
- 3 years of experience with NIST Compliance and ThirdParty Risk assessments
- Strong knowledge of information security practices procedures and regulations
- Previous experience in a government agency environment is highly desirable
- Ability to work independently with minimal oversight to complete assigned projects
General Duties:
- Assist with implementation and management the Organizations Secure Systems
- Perform security assessments and reviews of account permissions computer data access needs security violations and programming changes
- Develop appropriate plans to safeguard computer configuration and data files against accidental or unauthorized modification destruction or disclosure and to meet emergency data processing needs
- Coordinate the implementation of system security plans for internal personnel and outside vendors
- Coordinate account permissions and data access needs
- Review security violations and programming changes required
- Advise management and users regarding security configurations and procedures
- Participate in the development of information technology disaster recovery and business continuity planning
- Continuously review and assess technical risks of new and existing applications and systems including data center physical security and environment
- Research evaluate and recommend systems and procedures for the prevention detection containment and correction of data security breaches
- Prepare final security assessment reports containing findings
- May be asked to perform additional duties as required