IT Security Compliance and Audit Analyst

Pay Range: $25.00hr - $35.00hr Job Overview:
Our client supports state highways, roads, bridges, vehicle licensing, driver licensing, and highway safety operations. The primary focus of this position is to support technology, information security, compliance, and driver licensing operations. The successful candidate will support driver licensing systems, issuance technology, REAL , and related applications. The position provides information security and Governance, Risk, and Compliance (GRC) support, including security control assessments, risk assessments, compliance monitoring, security documentation, audit and evidence management, and continuous monitoring activities.

The successful candidate will work with System Administrators, IT staff, management, vendors, and other stakeholders to identify security and operational risks, support compliance requirements, improve system processes, and maintain appropriate security controls. The candidate may be required to review and analyze sensitive and confidential information and must maintain a high level of professionalism, accountability, confidentiality, and security awareness, and pass required fingerprint and background checks.

Primary Responsibilities:

Support information security and Governance, Risk, and Compliance (GRC) activities. Assist with the development, review, and maintenance of security policies, procedures, standards, and compliance documentation. Support compliance activities related to federal information security requirements, state requirements, and protection of Personally Identifiable Information (PII). Assist with NIST Special Publication (SP) 800-53 security controls and related control implementation requirements. Assist with security control assessments and documentation of control effectiveness.

Participate in risk assessments, risk identification, risk analysis, and risk mitigation activities. Assist with the development and maintenance of System Security Plans (SSPs) and supporting security documentation. Assist with Plans of Action and Milestones (POA&Ms), including documenting identified weaknesses, corrective actions, responsible parties, milestones, and remediation status. Support continuous monitoring activities to identify changes in security posture, system risks, vulnerabilities, and compliance status.

Assist with security audits, assessments, reviews, and security audit/evidence management. Collect, organize, validate, and maintain evidence required to demonstrate compliance with security controls and regulatory requirements. Support the assessment and documentation of hybrid controls, including controls involving cloud services, provided services, enterprise controls, external systems, and other shared responsibilities. Coordinate with system owners, System Administrators, IT staff, vendors, and other stakeholders to obtain security documentation and evidence.

Monitor identified security findings and assist with tracking remediation activities through completion. Assist with documenting security risks and providing recommendations to management regarding risk treatment and remediation. Support the review of system changes to determine potential security and compliance impacts. Assist with maintaining accurate security records, assessment documentation, and compliance artifacts. Compliance, Policy, and Training:
Assist with continual compliance monitoring to ensure applicable policies, procedures, security controls, and regulatory requirements remain current and effective. Support the review and updating of policies and procedures when security, technology, regulatory, or operational requirements change. Assist with updating policy and training language to reflect current compliance and security…