IT - ADMIN - Security Architect - Consultant

Scope of the Project

This position will perform duties as part of Client execution of its responsibilities under the statewide information security program. Client responsibilities include:

• Supporting agencies during their development of the information security program with direct tactical implementation assistance.
• Developing and tracking agency information security implementation plans.
• Interview administrators, managers and third parties to aid in development of program artifacts.
• Ensuring high‑level assessments of agencies' infosec work to ensure progress is made.
• Providing high‑level analysis of process and procedures work to ensure compliance with state standards.

Duties include, but are not limited to:

• Interviewing business and technical owners to determine policies and procedures used for each agency process.
• Developing and tracking infosec implementation plan progress.
• Documenting information gathered during both interviews and document reviews to assist with developing formal process and procedures.
• Assessing agency documentation to ensure adequate approaches are used to comply with controls.

• 10+ Years of Experience in Information Security and Compliance.
• 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer.
• Must have a strong working knowledge of NIST 800‑53 (2 Years of Experience).
• Prior experience POA&M or CAP.
• Strong Communication Experience.
• Experience using a GRC tool (Archer or similar) (3 Years of Experience).

• Have completed an information security plan or system security plan notebook.
• Simultaneously manage multiple infosec work efforts.
• Knowledge of IRS 1075, HIPAA, CJIS, MARS‑E and/or PCI‑DSS.
• Government sector experience.

• Ability to identify, map and re‑engineer business processes.
• Strong schedule management and resource planning skills.
• Ability to work at a high‑volume and fast pace.
• Strong collaborator and strong ability to meet deadlines.

Bachelor's Degree

• CISA, GSLC, or equivalent certification.