Senior Info Tech Bus Consultant

senior info tech bus consultant -

requisition no: 864904

working title: senior info tech bus consultant -

(working title: information security engineer)

state of florida

department of environmental protection

open competitive - anticipated vacancy

this is an onsite position in tallahassee, florida.

dep’s office of technology and information services (otis) is currently recruiting for a senior it business consultant. This position serves as an information security engineer for the department and reports to the information security manager. This is a highly technical position that creates and executes operational security initiatives on a continuing basis to improve the agency’s information security posture.

the ideal candidate will be a confident communicator, comfortable engaging with both internal and external stakeholders. They must exhibit exceptional organization and troubleshooting skills, attention to detail, along with strong written and verbal communication. Flexibility is essential, as the role will at times require availability outside of standard 8‑5 business hours.

we seek a proactive team member who can also work independently, demonstrating a strong working knowledge of enterprise cybersecurity solutions and practices. The ability to take direction, execute and document tasks efficiently is crucial. Additionally, the candidate should be comfortable with emerging technologies and an ever‑changing threat landscape.

specific duties and responsibilities include, but are not limited to:

• assist with maintaining the information security incident response plans and procedures to comply with florida state standards and rules. This includes:
  • maintaining procedures to ensure security requirements are incorporated into the change control process
  • maintaining the protection of the physical and virtual operating environment for agency-owned or managed it resources
  • maintaining a policy and procedure review process that facilitates continuous improvement of iam security
  • maintaining a policy and procedure review process that facilitates continuous improvement to security standards
• assist the information security manager (ism), with the following duties:
  • establishing an information security program that includes information security policies, procedures, standards, and guidelines; an information security awareness program; an information security risk management process, including the comprehensive risk assessment required by section 282.318, f.s.; a cybersecurity incident response team; and a disaster recovery program that aligns with the agency’s continuity of operations plan (coop). Proactively researching latent security threats and recommending risk mitigation actions
  • performing information security investigations in conjunction with the inspector general’s office and law enforcement agencies
  • developing, maintaining, and executing the department’s it security strategic plan
• review and modify identity and access management policies
• review and modify firewall rules iteratively to be more secure
• respond to information security incidents and execute countermeasures
• review access requests and provide access control oversight when needed
• maintain technical skillset in order to adapt to new technologies as they emerge including researching and recommending security focused training for themselves and others in the division
• monitor e‑mail filtering and spam control systems and configure as necessary to improve security
• ensure cryptographic standards are maintained in systems and applications
• assist with ensuring compliant cjis (criminal justice) systems, and recommend technologies and procedures for on‑premise and cloud‑based cjis infrastructure
• evaluate desktop policies to ensure proper patching levels and security policies are maintained
• assist the ism with strategic tasks including information security risk assessments, audits and governance
• perform other duties as assigned

attendance is an essential function of the position.

• superior communication skills, both verbal and written
• extensive experience in technical information security roles
• experienc…