Security Analyst

Security Analyst IIIThe Department of Health Services (DHS) is one of the largest and most diverse state agencies in Wisconsin. DHS employs more than 7,000 staff spanning ten divisions and offices and seven 24/7 institutions located throughout Wisconsin. Programs and services administered by DHS include Medicaid and other human service programs, alcohol and other drug abuse prevention services, mental health, public health, and long-term care. The Information Security Section (ISS) serves the Department by creating an information security culture and enabling the business. We are metrics minded, employee focused, and view security as a service. ISS is responsible for identifying and continuously assessing risk, developing, institutionalizing, and improving strategies to mitigate risk, limiting the potential effects of information security events, and the selection, assessment, authorization, and monitoring of security controls while contributing to the overall information security plan.The Information Security Section (ISS) is functionally organized into Security Awareness and Governance, Compliance, Architecture, and Portfolio Management. Cross-team collaboration is essential to our success. The DHS Liaison serves the Division of Medicaid Services and is the champion for security initiatives integrating information security into program operations. This work is completed by engaging other security staff, communicating risk, and developing strategies to reduce risk. To successfully do this work, one must possess strong communication and interpersonal skills capable of presenting to diverse audiences including executive and non-technical individuals. A federally recognized (ANSI) information security certification must be obtained within 6 months of the start date and maintained for this position. The Department of Defense (DOD) 8570 Baseline Certifications defined by Defense Information Systems Agency (DISA) is the baseline to consider when reviewing the relevance of the certification.Goals and Worker Activities:Integrate security into program operationsAct as a liaison between the program area and the Information Security SectionSupport audit, assessment, incident response, and other regulatory activitiesParticipate and support Program Integration related activitiesSupport Vulnerability Management related to DMS and its vendorsSupport DHS's transition from the Center for Medicare and Medicaid Services (CMS) compliance requirements known as the Minimum Acceptable Risk Standards for Exchanges (MARS-E) to the new requirements known as Acceptable Risk Controls for ACA, Medicaid, and Partner Entities (ARC-AMPE)Support DHS in completing software reviews, cloud brokerage reviews, and AI Use Case reviewsOther duties as assignedKnowledge, Skills, and Abilities:Broad knowledge of information security and experience application development, technical architecture, contracting, audit, or vendor management.Familiarity with NIST or another recognized framework.Demonstrated ability to solve complex problems, convey both oral and written instruction, and handle multiple task interruptions while providing services in a professional and courteous manner.Demonstrated attention to detail and organizational skills.Demonstrated ability to work effectively with customers to solve business challenges while balancing the need for confidentiality, integrity, and availability.Demonstrated commitment to fostering a diverse working environment.Demonstrated ability to work independently, as part of a team of peers, and also to support and contribute to a multidiscipline team environment.