Required Education

• Bachelor's degree from an accredited college or university with major coursework in Computer Science, Management Information Systems, Information Technology, or a closely related field.
• Five years of progressively responsible professional IT experience relevant to the position, which may include systems administration, network administration, database administration, application analysis/development, and/or information security.
• At least two years of the required experience must have been at an advanced journey level, in a supervisory capacity, or in a project management capacity; OR
• Bachelor's degree with five years of progressively responsible professional IT experience relevant to the position, including at least two years at the journey level in information security.
• Two years of relevant experience as an IT Professional III in Nevada State service may also qualify, or an equivalent combination of education and experience. Required Certifications
• Current CISSP (Certified Information Systems Security Professional) certification
• Current

PCI-DSS ISA

(Internal Security Assessor) certification Required Skills

• Strong knowledge and practical experience with NIST Risk Management Framework (RMF).
• Experience assessing security controls using NIST 800-53 and CIS Controls.
• Experience conducting operational, management, and technical security control assessments.
• Experience developing and maintaining System Security Plans (SSPs).
• Experience developing Risk Assessments, POA&Ms, Continuous Monitoring Plans, Security Control Traceability Matrices, and security operating procedures.
• Knowledge of information security compliance, risk management, security auditing, and authorization processes.
• Experience supporting security audits and external agency audits.
• Experience with vulnerability management, security scanning, patching, and security monitoring.
• Experience supporting penetration testing activities.
• Knowledge of security access controls, security awareness programs, incident response, anomalous activity detection, and security alert notifications.
• Ability to evaluate security-related software and hardware solutions and provide recommendations, including related cost considerations.
• Experience working with confidential information and maintaining security in regulated environments.
• Ability to perform security assessments and identify, document, and support remediation of security findings and vulnerabilities. Desired Skills
• AWS security / cloud security experience
• Salesforce security experience
• MuleSoft security experience
• Experience supporting security across both on-premises and cloud environments.
• Experience with security tools such as Tenable, Symantec, Alteris, Anomali, and SolarWinds.
• Experience with PCI-DSS, CJIS, and state and federal data privacy requirements.
• Experience supporting continuous monitoring and self-inspection activities.
• Experience with security authorization/accreditation processes.
• Experience coordinating security activities across multiple teams, systems, and organizational units.
• AWS Certified Security certification.
• Salesforce Cloud Security Engineer certification. Job Duties
• Serve as an Information Security Officer supporting the organization's overall information security program.
• Support penetration testing activities and related security assessments.
• Only those lawfully authorized to work in the designated country associated with the position will be considered.
• Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client's business needs and requirements.

•