IT Information Security Analyst, Senior

Dakota County, Minnesota is hiring a Senior IT Information Security Analyst to help protect the confidentiality of county information assets. This onsite role in Hastings, MN focuses on strengthening security standards, modernizing security technologies, and supporting compliance across major security frameworks and regulations. The position also offers strong stability and benefits, including comprehensive health coverage, generous paid time off, and pension support, along with the flexibility to work from home some of the time.

• Research and stay current on information security threats, industry trends, emerging technologies, and response alternatives.
• Recommend improvements to county information security policies, procedures, and guidelines.
• Assess, monitor, and support improvements to security procedures for user access creation, modification, and removal.
• Identify, assess, and help deploy security technology solutions across the county and through vendors, including encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
• Support approval, tracking, and reporting of security exceptions as needed.
• Prepare status reports on security matters to analyze security risk and vendor security control performance.
• Monitor security technology performance and proactively recommend solutions when capabilities fall short.
• Collaborate on critical technology projects to ensure security concerns are addressed throughout the project life cycle.
• Assist with security improvement and tool acquisition recommendations to the County Board and Senior Management.
• Evaluate security technologies and tools, and provide insight into deployment approaches for encryption, firewalls, authorization, authentication, intrusion detection, and gateway controls.
• Work with auditors to demonstrate processes and confirm appropriate access levels, including review of information identification and lifecycle practices.
• Participate in planning, selection, and implementation of an identity management solution.
• Provide advisory support to application development or acquisition efforts to ensure security requirements and controls are implemented as planned.
• Maintain and monitor compliance with security control frameworks such as CJIS Security Policy, HIPAA, IRS Tax 1075, PCI-DSS, and other state statutes and federal law.
• Perform regular assessments of the IT security environment to identify weaknesses and partner with IT management on improvement opportunities, including reducing complexity, reducing time and cost, and increasing effectiveness.
• Serve as a technical subject matter resource, providing security-domain expertise and direction on security-related projects.
• Lead and govern plans for contracted security assessments, driving remediation with internal and external partners across business and IT.
• Assess threats and risks to County systems and assist management with risk decisions.
• Balance business needs with security concerns, articulating issues and recommending options.
• Participate in design, development, and delivery of security training programs and individual classes.
• Maintain regular attendance according to the management-approved work schedule, following county hours (Monday through Friday, 8:00 a.m. to 4:30 p.m.) with on-call availability as required.

• Bachelor's degree in computer science, information systems, or information security, plus 3 years of work experience supporting IT security infrastructure.
• OR associate degree in computer science, information systems, or information security, plus 5 years of work experience supporting IT security infrastructure.
• OR a combined 7 years of equivalent education and experience in IT security infrastructure.
• CISSP.
• CompTIA Advanced Security Practitioner (CASP+).
• Certified Security Analyst (CSA).
• Knowledge of technological trends and developments related to security and risk management.
• Strong understanding of information security controls, risks, and threats.
• Understanding and experience with network protocols including switches, routers, and routing technologies.
• Strong working knowledge of Microsoft Windows Server environments, VMWare Server, Microsoft M365, Veeam Backup, and other enterprise-wide applications.
• Strong knowledge of enterprise security technologies including VPN, encryption, firewalls, intrusion detection/prevention, and anti-virus.
• Knowledge of information security standards, data privacy laws, computer crime laws, and state and…