Enterprise Security Analyst

The purpose of this role is to ensure the security and integrity of County sites, data centers and infrastructure across the organization. This includes assessing, managing, and training in physical and cyber security. The Enterprise Security Analyst will also play a key role in the health and continuity of IT operations. Duties and Responsibilities The functions listed below are those that represent the majority of the time spent working in this class. Management may assign additional functions related to the type of work of the class as necessary. Implement, assess, manage, secure, and provide technical leadership and administration for physical security technologies in use at all County facilities. Assess need for any physical and cyber security improvements, reconfigurations, and upgrades (minor or significant) and execute them if required. Assist in maintaining CJIS and FIPS compliancy for all County systems. Perform security audits as directed by management. Assist in correcting findings from incidents, penetration tests and other security-related audits. Test network security controls; coordinate remediation efforts and closure of any identified issues. Ensure systems and controls are in place to support both best practices and the County's information security policy and standards. Act as first line of support for triage and remediation of support tickets related to security; track ongoing support issues. Stay current with IT security trends and standards. Stay current on released security features of internal IT systems. Maintain confidentiality and integrity in dealing with sensitive information. Facilitate end user security training. Conduct risk assessments and business impact analysis to identify vulnerable areas within the County's critical functions. Performs related work as assigned. Minimum Education and Experience Requirements Requires Bachelor's degree in computer science, information systems, cyber security or related major. Requires two years of experience in information systems security systems and/or network and infrastructure. Understanding of firewalls, network switches, SIEM, antivirus, and IP concepts required. Experience with penetration testing and security assessments preferred. Physical Demands/Work Environment Physical demands refer to the requirements for physical exertion and coordination of limb and body movement. Unavoidable hazards refer to the job conditions that may lead to injury or health hazards even though precautions have been taken. The work is typically performed sitting at a desk or table or while intermittently sitting, standing, bending, crouching, or stooping. The employee occasionally lifts light and heavy objects. The work is typically performed in an office. Emergency Preparedness Tier Level: 2 Special Certifications and Licenses Requires CJIS level 4 certification. Valid TX Driver's License Must maintain CJIS compliance Benefits Build your career with The County of Galveston, where your health and well-being matter! As a benefit-eligible employee, you will enjoy: Flexible, comprehensive health benefits with multiple plan choices, including $0 premium options Full family coverage options for medical, dental, and vision Strong retirement security through TCDRS with generous 200% county matching (once vested & retirement eligible) County paid term and whole life insurance policies and long-term disability Work-life balance through paid time off, holidays, and other wellness initiatives Supportive networks through EAP and Marketplace Care Partners Department Information Technology Salary $74,702.00 #J-18808-Ljbffr Galveston County Human Resources