Information Security Analyst

Salary : $30.16 - $36.21 Annually
Location : County Services Building, 1101 E. First Street Sanford, FL
Job Type: Full Time Employment
Job Number: 2026-03909/25030
Department: ISI Information Technology
Opening Date: 10/08/2026
Closing Date: 10/29/2026 11:59 PM Eastern


Description


Establish, develop, monitor,andmaintain information security standards, procedures and practices based on the NIST framework for a more secure enterprise environment and safeguard the County's digital assets, infrastructure, and data. Information Security Analyst is responsible for maintaining compliance with security policies and standards, supports audits and risk assessments, conducts vendor risk and access reviews, supports incident response efforts, and enforces security measures to ensure confidentiality, integrity, and availability of information assets. This position works closely with IT, compliance, and risk management teams to maintain a robust security posture across the County and lead security awareness and education initiatives to foster a culture of proactive security awareness and promote security best practices.

Essential Functions

Note : These are intended only as illustrations of the various types of work performed. The omission of specific duties does not exclude them from the position.
Implement, monitor, administer, and maintain, information and cybersecurity standards, procedures, andtechnologiestoensure controlsare in place to protect enterprise informationsystems and data.

Conduct risk assessments and recommend mitigation strategies. Ensure compliance with industry regulations and internal policies. Assist with externals audits and prepare documentation for regulatory bodies.

Manage, configure, deploy and maintain risk assessment and compliance tools.

Conduct security assessments of third-party vendors and service providers. Review vendor security questionnaires and evaluate risk based on data handling practices, access controls, and compliance posture. Collaborate with procurement, legal, and risk teams to ensure contracts include appropriate security and data protection clauses.


Maintain a vendor risk register and track remediation efforts for identified issues. Reassess vendor risk periodically and monitor for changes in risk exposure.

Develop and deliver security awareness training programs for employees, contractors, and stakeholders.


Create educational materials such as newsletters, phishing simulations, and policy guides.


Promote a culture of security through ongoing communication and engagement. Track participation and effectiveness of training programs and adjust content based on emerging threats and county needs.

Create, implement, and enforce security standards and procedures and conduct audits to ensure compliance with regulatory policies and security frameworks, such as NIST CSF.

Review and perform risk reviews and assessments on existing or new systems and recommend security improvements.

Maintain a proactive role in understanding and evaluating current and emerging technologies, ensuring they alignwith County needs and security objectives.

Continually improves job knowledge by tracking and understanding emerging security threats, standards, practices, and security products.

Participates and supports security investigations, help mitigate security events, and coordinate remediation or recovery efforts.

Review, test compliance, and recommend remediation for security practices, policies and procedures.

Recommend implementation of processes or technology to improve security posture.

Act as a security liaison on promoting security best practices, implementation of security frameworks, regulatory and policy implications for departments, and across separate business lines, constitutionals, other agencies.

AdditionalDuties:
Performs other related work as required.
In the event of an emergency, all employees are considered essential personnel and may be required to perform alternate duties and work varying schedules.

Minimum Qualifications


Bachelor's Degree in an associated field and (3) years' experience in enterprise Information Technology security and cybersecurity roles.

Preference will be given to those with information security or cybersecurity certifications.

A comparable amount of education, training, or experience may be substituted for the minimum qualifications.

Additional Requirements


Work requires a high degree of teamwork, coordination with customer departments, independent judgment, initiative, and a positive attitude.

Position requires experience in information security or cybersecurity technologies, processes and policies, and general knowledge in information technology infrastructure and systems.

Ability to communicate effectively with other team members, customers, citizens, executive leadership, and elected officials.

Must be able to learn new concepts quickly and resolve complex technical problems effectively.

Must possess excellent oral and written communicationskills and be ableto organize and prioritize tasks successfully.

Must possess and maintain a valid Florida Driver's license.
County-paid benefits for employees

Competitive Wages: Our compensation system includes competitive hiring salaries.


Paid Time Off: New full-time employees accrue 20 days per year of Paid Time Off (16 days for 24-hour shift personnel). New part-time employees accrue 83 hours per year of Paid Time Off. Accrual rates increase with service time.
Paid Holidays: We observe 12 paid holidays which includes an employee birthday holiday and a floating Work/Life Day.

Bereavement Leave: Employees may receive up to one week paid leave per fiscal year for absence due to the death of an immediate family member.
Florida Retirement System: All employees in regularly established positions are automatically covered from the first day of employment. Seminole County makes contribution on behalf of the employee and the employee is also required to make a 3% contribution.
Employees Assistance Program: Our EAP provider can help employees and their families with issues such as personal/family matters, financial debt counseling, substance abuse, etc.
Training and Development Program: The Employee Learning Center provides training opportunities for employees which promote performance, enhance employees' work life experiences, and support the organization.
Employee Awards and Recognition: A program to reward outstanding performance and enhance service to the citizens of Seminole County.
Wellness Center: Includes exercise equipment, resource library, and educational programs.
Health Insurance :Health Insurance is effective the first of the month after completing 30 calendar days of employment. Seminole County offers a Point of Service (POS) plan. Dependent coverage is also available, the cost is split between the employee and employer. This benefit is not extended to part-time employees.
Life Insurance: Life and Accidental Death & Dismemberment Insurance for employees, equal to one times annual salary. Not extended to part-time employees.
Long-Term Disability: Provides 60% of salary after 6 months of disability. Not extended to part-time employees.
Optional benefits (employee-paid) for full-time employees:
Deferred Compensation Plan (457): Employees may choose to have pre-tax payroll deductions made for deposit into this savings plan up to an IRS-established maximum.
Dental Insurance: A choice of 3 plans is available for employees and dependents at employee expense.
Additional Life Insurance: At employee expense, additional life insurance up to five times annual salary; dependent coverage also available.
Short-Term Disability Insurance: 60% of salary for the first six months of disability at employee expense.
Cancer and Specified Disease : Pays a benefit directly to the employee if being treated for this disease.
Flexible Spending Account: Apre-tax account for childcare and un-reimbursed medical expenses.
Pre-Tax Payroll Deductions: Under Section 125 of the IRS Code, certain payroll deductions for insurance coverage may be taken out prior to income being taxed.
01


Describe your experience developing cybersecurity policies, standards, and procedures.
02


Describe your experience conducting cybersecurity risk assessments.
03


Describe your experience evaluating the security posture of third-party vendors and service providers.
04


Describe your experience creating or delivering security awareness training, including developing training content.
05


Please describe your general knowledge or experience on these topics?a. Endpoint security technologiesb. Assessing system vulnerabilities and threatsc. Investigating cybersecurity incidents
06


Do you wish to mention any other job-related experiences appropriate for this position?
07


What cybersecurity certifications do you hold?
08


What is your highest level of education?

• High School Diploma or GED
• Associate's degree
• Bachelors Degree
• Masters Degree or higher

09


How many years of relevant experience do you possess?

• Less than a year
• 1-3 years
• 3-5 years
• 5 years or more

Required Question