Information Technology Specialist Information Security - AR

Position: Information Technology Specialist 2 Information Security - 20000AR
Location: Latham

Duties Description Under the direction of senior team members within the Chief Information Security Office (CISO) / Cybersecurity Governance & Compliance (CGC) / Access Review section, the Information Technology Specialist 2 (Information Security), SG-18 will serve as an Access Review Analyst and support the team in providing in-depth account and entitlement review for ITS and client agencies to ensure Agency compliance with regulatory requirements and standards.

The Access Review Section consists of two units:
The Operations unit provides the delivery of services to ITS and our client agencies and the Development unit coordinates the technologies behind the reviews as well as the expansion of technologies and agencies able to be reviewed.

The position requires an incumbent to act with a great deal of independence in alignment with CISO and upper-level CISO management strategic direction. The position requires technical expertise in a broad range of areas to permit working directly with technical teams throughout ITS. The position requires communicating orally and in writing with various individuals including management, users, and other IT staff.

The incumbent will have to work with ITS teams and upper-level agency management to ensure compliance with the review standards, verify completeness of reviews, and resolve any issues.

The position will be part of the CISO Incident Response program to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.

Specific duties include, but are not limited to:

• Participate in meetings to discuss specific requirements for new functionality of the access review application based on client feedback.

• Provide process improvements and recommendations to increase the ease and usability for the end user.

• Monitor, test, and troubleshoot technology issues in the current access review program to ensure it is functioning smoothly.

• Work with leadership on assigned development tasks in order to maintain the current and future access review applications developed in Power App and SharePoint.

• Work with SharePoint databases and write queries to pull data directly from the back-end database.

• Assist the end users with questions or issues regarding the access review process/application.

• Collect, analyze, and summarize status information for upper management.

• Review and identify documentation needed for collecting, analyzing, and normalizing data from technologies to be reviewed in the access review tool.

• Develop and document processes for identifying data needed for access review to be completed.

• Assist with regulatory compliance audit/reviews.

• Perform additional duties as required.

Minimum Qualifications Information Technology Specialist 2 (Information Security)
Non-competitive: two years
* of information technology, cybersecurity, or information assurance experience.

* Substitutions:

A bachelor's or higher-level degree including or supplemented by 15 semester credit hours in computer science substitutes for both years of required experience; or a bachelor's or higher-level degree in any field substitutes for one year of required experience; 60 semester credit hours including or supplemented by 15 semester credit hours in computer science substitutes for one year of required experience.
as required.

Preferred Qualifications:

• Bachelor's Degree with a concentration or major in Information Security, Cybersecurity, Information Technology Management, Digital Forensics, or a related field.

• Applicable Information Security certificate(s), including but not limited to:
o Certificate in Information Security Fundamentals (e.g., Security+, GSEC, CISF, GISF)

• Excellent oral and written communication skills, including the ability to clearly articulate information technology and application architectural concepts.

• Demonstrated critical thinking, problem solving, presentation, and analytical skills.

• Demonstrated skill in understanding and completing tasks with a varying degree of supervision.

• Detail oriented with strong organizational and project management skills.

• 2+ years'…