IT Security Analyst Senior Supervisor

Hiring Range: $90721.00 to $147421.00

Full Time or Part Time:

Design, implement and oversee operations for VDOT information technology projects or programs. Ensure operations are conducted in alignment with information technology strategies. Leads a team in analyzing data, monitoring performance, developing policies and procedures and resolving complex problems and issues. Serve as the statewide cybersecurity analyst and supervisor for assigned area of VDOT’s cybersecurity program. Provide cybersecurity coverage for VDOT’s growing technology environment, which could include data, cloud (Azure), systems, network, account, highway infrastructure, and roadway device security.

• Administrative
  
  Activities:
  
  Support agency security audits, executive security status reporting, and related administrative tasks.
• Compliance:
  Comply with VDOT and IT policies, standards and guidelines. Ensure all projects are in compliance with VDOT and COV policies, procedures and guidelines.
• Cyber Security Tools:
  Deploy and configure cybersecurity tools in coordination with VDOT peers. Administer cybersecurity tools on an ongoing basis to ensure correct operation and appropriate access. Periodically verify that cybersecurity tools are operating effectively to monitor all in scope devices and system.
• Cybersecurity Coordination:
  Coordinate cybersecurity activities among all VDOT stakeholders in assigned areas of responsibility. Chair security governance committees as needed. Periodically meet with staff across VDOT in assigned areas of responsibility to discuss both routine and emerging security related issues. Communicate with vendors as needed regarding security requirements.
• Cybersecurity Incidents:
  Respond to cybersecurity incidents or other high priority cybersecurity items. Perform digital forensics support activities as needed to support resolution of security incidents. Provide reports on cybersecurity incidents and lessons learned to improve the agency security posture.
• Documentation and Reporting:
  Provide status reports on project plans, timelines, schedules and progress updates. Participate in strategic planning for systems. Prepare documentation. Develop and update user manuals. Prepare materials and conduct user training.
• Policies and Procedures:
  Develop policies, guidelines and standard operating procedures related to assigned technology program area. Document best practices, and review and update policies and guidelines as changes occur.
• Policies and Standards:
  Develop and update on an annual basis cybersecurity policies and standards for VDOT’s operations technology infrastructure. Assist in the performance of security risk assessments as needed. Monitor trade publications and other industry sources to provide agency guidance on possible future security issues that may impact the VDOT operations technology infrastructure.
• Project
  
  Collaboration:
  
  Collaborate with other section team members on projects and programs and participate on project teams. Share knowledge with other team members and encourage their participation.
• Project Support:
  Leads staff and serves as Project Manager for assigned technology program and projects. Serve as a senior technical resource.
• Security Analysis and Monitoring:
  In coordination with VDOT stakeholders, perform ongoing security analysis and monitoring of the VDOT technology environments in the assigned area of responsibility including - Identify and correct security vulnerabilities; identify and respond to potential security breaches; monitor and communicate security bulletins from industry experts for remedial action as needed; periodic verification that technology devices meet baseline security standards; review security event logs for possible issues and follow up.
• Security Reviews and Recommendations:
  Make security related recommendations for new products. Review proposed configuration changes for a security impact and approve or deny requests as appropriate.
• Strategic Management:
  Work with peers and subordinates to define strategic direction for assigned technology program. Evaluate tools and prioritize work efforts with stakeholders from…