Information Security Analyst Iv

Overview

The Information Security Analyst IV serves as the senior-level lead responsible for the administration, operation, and continuous improvement of the organization’s Vulnerability Management Program. This position is responsible for identifying, assessing, prioritizing, tracking, and reporting cybersecurity vulnerabilities across enterprise systems, applications, and network infrastructure. The analyst provides strategic oversight of vulnerability scanning technologies, coordinates remediation efforts with technical stakeholders, and ensures timely mitigation of identified risks in alignment with organizational security policies and regulatory requirements.

• Lead management of the vulnerability management program, including administration, operation, and continuous improvement.
• Identify, assess, prioritize, track, and report cybersecurity vulnerabilities across enterprise systems, applications, and network infrastructure.
• Provide strategic oversight of vulnerability scanning technologies and coordinate remediation efforts with technical stakeholders to ensure timely mitigation of identified risks.
• Align vulnerability management activities with organizational security policies and regulatory requirements.

• Four (4) years of experience in Management Information Systems (MIS), Computer Science, Information Systems, Information Technology, or related field is required.
• A post-secondary degree in MIS, Computer Science, Information Systems, Information Technology, or related field may be used as an alternative for the years of experience on a year-for-year basis.
• Five (5) or more years of progressive experience in cybersecurity, with significant experience in vulnerability management or security operations.
• Five (5) or more years of experience administering enterprise vulnerability scanning and reporting tools in large-scale environments.
• Excellent interpersonal and communication skills (English Proficient).

• Familiarity with scripting or automation tools such as Power Shell, Python, or APIs for scan orchestration and reporting.
• Professional certifications such as CISSP, GSEC, GPEN, CEH, Security+, or vendor-specific certifications related to vulnerability management platforms.

• This position may be required to occasionally perform duties other than those listed on the position description.
• This position requires a security background check, including fingerprint as a condition of employment.

• Knowledge of Florida statutes, rules related to IT and information security.
• Knowledge of National Institute of Standards and Technology (NIST) security standards and frameworks (e.g., NIST SP 800-53, NIST CSF, CIS Controls, ISO 27001).
• Knowledge of vulnerability management frameworks, lifecycle processes, and industry best practices.
• Knowledge of enterprise vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7) and related CVE/CVSS concepts.
• Ability to interpret technical vulnerability data and translate findings into actionable remediation guidance; ability to manage multiple priorities in complex environments.
• Ability to communicate effectively in writing and orally to both technical and non-technical audiences.

• Salary Range (PB): $90,000.00 – $ Annually
• Location:
  
  Tallahassee, FL, US, 32301
• Posting Closing Date: 06/03/2026