IT Security Analyst Senior Supervisor

23804 - IT Security Analyst Senior Supervisor Job Info

• Job Identification 12669
• Job Category Information Technology Specialists
• Posting Date 06/24/2026, 01:32 PM
• Locations Hospital Building
• Apply Before 07/02/2026, 03:59 AM
• Job Schedule Full time
• Minimum Salary 90721.00
• Maximum Salary 147421.00
• Competency Model Leader
• Contact Name Logan Sanchez

Design, implement and oversee operations for VDOT information technology projects or programs. Ensure operations are conducted in alignment with information technology strategies. Leads a team in analyzing data, monitoring performance, developing policies and procedures and resolving complex problems and issues. Serve as the statewide cybersecurity analyst and supervisor for assigned area of VDOT’s cybersecurity program. Provide cybersecurity coverage for VDOT’s growing technology environment, which could include data, cloud (Azure), systems, network, account, highway infrastructure, and roadway device security.

How you will contribute:

• Administrative
  
  Activities:
  
  Support agency security audits, executive security status reporting, and related administrative tasks.
• Compliance:
  Comply with VDOT and IT policies, standards and guidelines. Ensure all projects are in compliance with VDOT and COV policies, procedures and guidelines.
• Cyber Security Tools:
  Deploy and configure cybersecurity tools in coordination with VDOT peers. Administer cybersecurity tools on an ongoing basis to ensure correct operation and appropriate access. Periodically verify that cybersecurity tools are operating effectively to monitor all in scope devices and system.
• Cybersecurity Coordination:
  Coordinate cybersecurity activities among all VDOT stakeholders in assigned areas of responsibility. Chair security governance committees as needed. Periodically meet with staff across VDOT in assigned areas of responsibility to discuss both routine and emerging security related issues. Communicate with vendors as needed regarding security requirements.
• Cybersecurity Incidents:
  Respond to cybersecurity incidents or other high priority cybersecurity items. Perform digital forensics support activities as needed to support resolution of security incidents. Provide reports on cybersecurity incidents and lessons learned to improve the agency security posture.
• Documentation and Reporting:
  Provide status reports on project plans, timelines, schedules and progress updates. Participate in strategic planning for systems. Prepare documentation. Develop and update user manuals. Prepare materials and conduct user training.
• Policies and Procedures:
  Develop policies, guidelines and standard operating procedures related to assigned technology program area. Document best practices, and review and update policies and guidelines as changes occur.
• Policies and Standards:
  Develop and update on an annual basis cybersecurity policies and standards for VDOT’s operations technology infrastructure. Assist in the performance of security risk assessments as needed. Monitor trade publications and other industry sources to provide agency guidance on possible future security issues that may impact the VDOT operations technology infrastructure.
• Project
  
  Collaboration:
  
  Collaborate with other section team members on projects and programs and participate on project teams. Share knowledge with other team members and encourage their participation.
• Project Support:
  Leads staff and serves as Project Manager for assigned technology program and projects. Serve as a senior technical resource.
• Security Analysis and Monitoring:
  In coordination with VDOT stakeholders, perform ongoing security analysis and monitoring of the VDOT technology environments in the assigned area of responsibility including - Identify and correct security vulnerabilities; identify and respond to potential security breaches; monitor and communicate security bulletins from industry experts for remedial action as needed; periodic verification that technology devices meet baseline security standards; review security event logs for possible issues and follow up.
• Security Reviews and Recommendations:
  Make security related recommendations for new products. Review proposed…