It Professional - Information Security

Overview

The Information Security Officer (ISO) serves as the primary authority responsible for establishing, implementing, monitoring, and enforcing information security policies, standards, and safeguards for Nevada Medicaid systems, vendors and operations. The ISO provides leadership, strategic direction, and subject-matter expertise to ensure compliance with federal, state, and agency security requirements, and acts as the central coordination point for security governance, risk management, incident response, and interagency collaboration.

• Information Technology (IT) Professionals analyze, develop, implement, maintain, and modify computer operations, systems, networks, databases, applications, and/or information security. Incumbents may perform duties in one or more IT specialization areas depending on the needs of the agency.
• Conduct detailed alternative analyses and determine end-user requirements through consultation with end-users, technicians, vendors, management, and others.
• Maintain documentation related to the assigned IT specialization’s architecture, operations, and other records of work activities as required.
• Maintain current knowledge of technological trends and advancements in the IT field as well as security management practices, laws, policies, and ethics.
• Perform related duties as assigned.
• Under general direction, incumbents perform advanced journey level duties and may train, supervise, and evaluate the performance of subordinate staff and/or serve as a project leader as assigned. Incumbents may function as a unit leader to include directing the activities of a branch IT support unit, overseeing projects of limited scope, and coordinating activities with other work groups. This is a supervisory level for Computer Operations and the journey level for Information Security positions.
• This job specification lists the major knowledge, skills and abilities of the job and is not all inclusive. Incumbent(s) will be expected to have knowledge, skills and abilities from a previous level.

Information Security: Working knowledge of three of the ten security domains; current principles, theories, practices, and procedures of information security management.

General knowledge: general-purpose security controls; current information security trends and technologies.

Ability: develop plans to safeguard against accidental or unauthorized modification, destruction or disclosure of data to meet security needs; assess costs and present alternatives for the assigned area of responsibility; participate in long-term projects and strategic planning; organize resources and materials in order to meet project timelines; assess the security and/or vulnerability of information assets to assist in developing a risk assessment;

analyze data, solve problems and make appropriate decisions within three of the ten domains; provide effective and responsive customer service; establish and maintain positive working relationships with others; develop and implement information security training materials and workshops.

Skill in: technical writing, report preparation and oral communication.

Recruiter Contact Information:
Victoria Sheehan - Torisheehan.gov