Information Security Analyst II

Information Security Analyst II

The Innovation and Technology Department is seeking motivated and passionate professionals for the role of Information Security Analyst II (ISA II). The analyst will be responsible for monitoring, analyzing, and collaborating on security incidents and events to safeguard the security operations of the Countywide Information Security Program, that provides protection, governance, risk, and compliance.

The ISA II monitors, analyzes, investigates, and responds to cybersecurity events and incidents that may affect County systems, applications, networks, and information assets. The analyst will work collaboratively with experienced cybersecurity team members, County departments with diverse business and regulatory requirements, and various technology teams to identify potential threats, evaluate security concerns and issues, and support efficient and effective response including identifying appropriate mitigation and remediation activities. They will respond to, defend against, consult on, and resolve enterprise and departmental security concerns, events, issues, and incidents related to cyber, operational, and information security.

Key responsibilities may include:

• Monitoring computer networks for security issues and suspicious activities.
• Performs as an incident responder and investigates cybersecurity incidents.
• Lead response efforts in collaboration with other IT teams, vendors, and cyber intelligence partners to analyze and remediate the issue.
• May lead or coordinate cybersecurity incidents and investigations with Human Resources, County departments, outside agencies (e.g. regulatory agencies) including law enforcement.
• Educates team members; and recommends security measures including protocols, policies, and standard practice to leadership.
• May lead, facilitate, coordinate, or conduct vulnerability assessments with a proactive focus on threat intelligence and the mitigation and prevention of cyber attacks.
• Collaborate with colleagues for network security design enhancements.
• Leads the coordinating and facilitating the Countywide Security Awareness Training Program
• Leads the coordinating and facilitating the Countywide Phishing Simulation Program.
• Leads the conducting, coordinating, and facilitating cybersecurity or information security tabletop exercises.
• Reviews and coordinating contracts, procurement documents, and software or service licensing agreements to identify and assess cybersecurity, privacy, and compliance risks, and provides recommendations to ensure adherence to organizational security policies and regulatory requirements.
• Participate in on-call rotation and after-hours maintenance as needed.