Senior IT Security Analyst; DVR

Position: Senior IT Security Analyst (DVR #10197)
$35.37 - $53.05 Hourly

$73,568 - $110,352 Annually

This position is a Pay Band C10

Posting Details

The New Mexico Division of Vocational Rehabilitation (NMDVR) is a state-run agency dedicated to assisting individuals with disabilities in achieving employment success. Through services such as vocational counseling, job placement assistance, training and education, assistive technology, and support services, NMDVR aims to enhance the employability and independence of people with various disabilities. Tailoring its programs to meet individual needs, the agency is committed to facilitating competitive employment and fostering independence among its clientele.

This posting will be used for ongoing recruitment and may close at any time. Applicant lists may be screened more than once.

Why does the job exist?

The role of the Senior IT Security Analyst exists to manage and mitigate risks related to security and regulatory compliance, ensuring that the organization operates securely and in accordance with state/federal regulations and industry standards. The position's expertise and responsibilities are crucial for safeguarding NMDVR against internal and external threats.

How does it get done?

Under direct supervision of the NMDVR Director, the incumbent of this position will support the agency's information security program through the management and oversight of cybersecurity tools, risk management activities, security audits and assessments, compliance monitoring, incident response, security architecture, disaster recovery planning, continuous improvement initiatives, and employee security awareness and training efforts.

The position will work closely with the Chief Information Officer (CIO) to ensure the proper configuration and security of IT systems, including the protection of information both in transit and at rest, while supporting ongoing vulnerability assessments and periodic penetration testing activities to strengthen the agency's overall cybersecurity posture. The incumbent will also assist in the development and implementation of a comprehensive, risk-based information security program aligned with agency operational and compliance requirements.

¿ Oversee the implementation, administration, and maintenance of information security tools and technologies, including firewalls, antivirus solutions, intrusion detection/prevention systems, and access control systems.

¿ Monitor emerging cybersecurity threats, vulnerabilities, and industry trends to recommend and implement enhancements to security policies, procedures, controls, and technologies. Collaborate with vendors to evaluate security solutions and ensure compliance with organizational security requirements. Develop, test, and maintain disaster recovery and business continuity plans to support organizational resilience and regulatory compliance.

¿ Conduct risk assessments of IT systems, applications, networks, and infrastructure to identify potential vulnerabilities and develop mitigation strategies and risk management plans.

¿ Perform security audits, vulnerability assessments, and compliance reviews of IT systems, applications, databases, and networks to identify security weaknesses and ensure adherence to established standards and policies.

¿ Monitor and ensure compliance with applicable regulations, standards, and best practices related to information security and data protection, including National Institute of Standards and Technology (NIST) guidelines and Personally Identifiable Information (PII) requirements.

¿ Assist in the design, implementation, and maintenance of secure IT architectures, systems, and security controls.

¿ Lead and coordinate incident response activities related to cybersecurity events, including investigation, containment, remediation, recovery, and response to security alerts.

¿ Develop and deliver cybersecurity awareness and training programs to promote organizational security best practices and employee compliance.

¿ Perform other duties as assigned.

Who are the customers?

Internal and external customers.

Ideal Candidate

The ideal candidate will possess strong knowledge of information security principles, cybersecurity…