Sr Information Security Analyst II - IT

Job Description - Sr Information Security Analyst II - IT (R025674)
Sr Information Security Analyst II - IT - R025674

Primary Location

DC-Washington

Regular

Exempt

Standard

Relocation Provided :
Yes

Compensation Grade Low : FR PAY GRADE 27

Compensation Grade High : FR PAY GRADE 28

Minimum Salary : $

Maximum Salary : $

Sep 1, 2026

Bachelor's degree or equivalent experience

6

Oversees and/or participates in designing and implementing security measures to meet the needs of the organization’s IT systems. Develops an expert understanding of system architecture and the ability to design security solutions that can be applied to multiple systems. Uses data analytics to identify potential security risks and make data-driven decisions about how to improve security across the organization. Oversees collaboration with other cybersecurity professionals to develop and implement security solutions that can withstand potential threats.

With limited guidance, provides technical and analytical information security support to ensure Board information and systems are adequately protected.

• Oversees and/or participates in implementing risk management and continuous monitoring activities for technology portfolios. Utilizes expert knowledge of risk management principles to evaluate and mitigate potential risks and identify emerging risks using established frameworks and guidelines. Oversees the assessment of the causes and sources of risk, the impacts, and the probability of occurrence.
• With limited guidance, proactively supports planning and implementation of the cybersecurity initiative, such as Cybersecurity Executive Order directives including Zero Trust Architecture.
• Oversees coordination with leadership to create and communicate plans (action, operating, automation, strategic plans), options, approaches, and roadmaps to ensure continuous service and process improvement.
• Defines, designs, and/or develops new policies and procedures to address cybersecurity and operational risk and advises senior management on resilience, information technology, and critical infrastructure. With limited guidance, improves upon business processes by employing a systematic approach of evaluating and optimizing underlying processes.
• Utilizes expert knowledge of and adherence to applicable governing standards to work closely with the Division of IT security teams to support compliance with the Board Information Security Program (BISP).
• Oversees and/or facilitates the initiation and completion of all security assessments and meeting agreed upon schedules by the supported divisions and certifying agents.
• With limited guidance, provides premier IT and business consulting support to provide expert recommendations and function as a trusted advisor to clients and stakeholders. May include subject matter expertise of IT systems, strategic planning, researching new and emerging technologies, evaluating proposed IT solutions, supporting IT procurement activities, and briefing leadership.
• Oversees initiatives and/or works with clients and vendors to implement information system security lifecycle plans in compliance with applicable security statutes and regulations.
• With limited guidance, works on project team to implement and measure the effect of complex security, data loss prevention and privacy strategies. Effectively plans, prioritizes, and executes assignments and work activities with minimal supervision.
• Utilizes expert knowledge of system security standards, best practices, trends, preventative measures, and disaster recovery processes to verify the effectiveness of the security controls protecting systems, which may entail developing and…