Information Security Analyst

MOS Codes

• 0681 (Marine Corps)
• 1D731D (Air Force)
• 022779 (Navy)
• 25B (Army)

• Bachelor's Degree or higher in information technology, management information systems, computer science, accounting, finance, economics, business administration, or a related field.
• Four (4) years of information technology and/or Physical Security experience; at least two of those years in network/server management or physical access systems.

• Valid Texas Class "C" Driver's license or an equivalent issued by another state (required by time of appointment).
• Within twelve (12) months from the date of appointment, one of the following industry certifications: GSEC, GCIH, or GCIA.

• Pass a Criminal Justice Information Systems (CJIS) fingerprint‑based background check and maintain CJIS eligibility.
• Disqualified for the following: felony convictions, felony deferred adjudication, class A & B misdemeanor deferred adjudication, class B misdemeanor convictions, an open arrest for any criminal offense (felony or misdemeanor), and family violence convictions.

• Assist with the development, documentation, and maintenance of information security policies, procedures, and standards to align with business goals across city departments.
• Analyze information security processes and coordinate solutions with the Department of Information Technology Services and City departments, including identifying system configurations, interviewing key personnel, and working with the Information Security Assurance Manager to develop standard documentation (security categorizations, risk assessments, contingency plans, security test & evaluation reports, vulnerability assessment reports, etc.).
• Develop, document, and enforce security policies, standards, guidelines, processes, and procedures to support the enterprise security posture, including updating security controls, hardening operating systems, devices, and access systems builds, and shaping data system, network security architecture, risk analysis scenarios, and response procedures.
• Administer security tools, monitor security events, provide alerting and reporting, and implement a Business Continuity and Disaster Recovery Plan for the organization.
• Monitor and report on the status of information security processes, evaluate, design, monitor, implement, and administer information security systems, process requests to design or modify security accesses, troubleshoot end‑to‑end support on information security systems software, prepare status reports on security matters, review violation reports, investigate exceptions, and represent the security needs of the organization.

Note:

This is an unclassified contract position.