Security Risk Analyst Position Available In St. Louis, Missouri

Security Risk Analyst St. Louis County, MO – 3.6 Clayton, MO Job Details Full-time $33.17 – $39.80 an hour 1 day ago Benefits Paid parental leave Paid holidays Disability insurance Flexible spending account Paid time off Parental leave Loan forgiveness Life insurance Retirement plan Qualifications Computer Science

PCI HIPAA

Mid-level RBAC Firewall Incident response NIST standards Organizational skills Intellectual property law IT SIEM Associate’s degree CompTIA Security+ 2 years Information Technology Full Job Description St. Louis County Government’s Department of Information Technology seeks to hire for the position of Security Risk Analyst . An employee in this job class is responsible for planning, providing, and implementing IT security controls for the Department of Information Technology. This position will function as an analyst that reviews IT security policies and procedures as well as end user training plans to ensure compliance with industry standards such as PCI, HIPAA, etc. This position will also enforce network security using tools such as firewalls, access control lists, and role-based access control. Addressing complex issues distinguishes this job class from IT37-Associate Security / Network Analyst. The starting salary range for this position is between $33.17 – $39.80 hourly, depending upon the candidate’s qualifications as well as budgetary considerations. We offer a comprehensive benefits package and a generous Paid Time Off (PTO) policy. To learn more about these and other County benefits, please visit: Competitive Benefits – St. Louis County Website. St. Louis County Government is a qualified agency for the Public Service Loan Forgiveness program managed by the Federal Government. For more information regarding this program, please visit: Public Service Loan Forgiveness | Federal Student Aid. Examples of Duties Assist in the development of effective Enterprise Security Policies and Procedures such as Business Continuity, Disaster Recovery, Incident Response and IT Playbooks. Audit and update firewall policies to ensure we are granting appropriate network access for our environment. Proactively research and monitor security-related information sources to aid in the identification of threats to networks, systems, and intellectual property. Perform detailed analysis of threat and vulnerability alerts to determine current impacts and assist County IT team to coordinate remediation actions. Prepare reports that document attempted attacks, security breaches, and general metrics. Work with end users to educate them on IT security issues such as phishing, ransomware, and insider threats. Evaluate gaps in security and identify solutions to mitigate risk, including business processes, technical controls, or policy improvements. Build collaborative internal relationships with program and project teams, as well as external relationships with customers, regulatory bodies, other agencies and business partners. Maintain current knowledge of best practices, standards, trends and developments in the security and network analyst field. Innovate and automate reporting and other requirements. Perform other duties as required or assigned. Minimum Qualifications Equivalent to an Associate’s Degree in an Information Technology (IT) discipline At least two years of relevant experience Preference may be given to applicants who have one or more of the following qualifications: COMPTIA Security+ certification Familiarity with NIST, PCI, HIPAA and other industry standards 3 years’ experience working in the IT Industry Experiencing using tools such as a SIEM, Vulnerability Manager, EDR, Firewall Experience in policy review and development is preferred Experience in Incident Response Planning and Execution Ability to work independently in a high paced environment Exceptional problem-solving abilities and decision-making skills in a complex IT environment Excellent organizational skills and the ability to document work that is completed Additional Information

SELECTION AND APPOINTMENT

: A selection committee will evaluate the qualifications of each applicant which will include recentness and appropriateness of the applicant’s education and experience, answers to the supplemental questions, results of employment references investigated and any other appropriate information available. The selection committee will admit to the interview only those persons who possess the most job-related qualifications and may establish admittance criteria beyond the minimum qualifications stated above. The interview will comprise 100% of the applicant’s earned grade. A candidate must earn a qualifying grade of 70 or more on the interview to be eligible for appointment. After initial interviews with the selected candidates are conducted, an email will be sent to the address on file with instructions on how to complete and submit a Conviction Questionnaire. Candidates have 3 days to complete the required questionnaire. The five top ranking candidates, based on the final grade, will be certified to the Department Director/Appointing Authority who will make the final decision. All applicants conditionally offered a merit position will be required to submit to urinalysis to screen for illegal drug use prior to appointment. Screening will be performed by a reputable clinical laboratory. The cost of screening will be covered by the County. St. Louis County offers its employees many excellent benefits with paid medical insurance, 20 days of PTO (paid time off) the first year and increasing with seniority, and 11-12 paid holidays. Employees hired for full time employment will participate in the St. Louis County retirement plan where they contribute 4% of their salary to the defined benefit plan with vesting after 7 years.

Other benefits include:

paid life insurance, a credit union, 457 Deferred Compensation Plan, pre-tax premium pay plan, dependent care and medical expense reimbursement plans, and short and long term disability insurance. In addition to these benefits, as of January 1, 2023, St. Louis County approved up to 480 hours of paid parental leave for eligible employees welcoming new children, either by birth or adoption. The employee can also take up to 80 hours of leave for prenatal care and up to 80 hours for care of the child within the first year.