IT Security Risk Analyst(32545)

divh2IT Security Risk Analyst/h2pIDEALFORCE has a contract position available immediately for a IT Security Risk Analyst to join our customer in Phoenix Arizona. This is an ONSITE position. This role will be part of the Infrastructure Protection unit within the Information Technology Group of the Arizona Department of Transportation. This position engages with multiple risk, compliance, business area management, technology owners and external stakeholders. The position will provide timely and quality service to ensure that financial, regulatory, and compliance risks are adequately identified, communicated, and tracked for remediation. This position is primarily responsible for executing security risk assessments and policy, process and procedure documentation in accordance with statewide standards, industry standards and best practices. Excellent writing skills are required as the majority of work includes documentation output / deliverables./ph3Job Description/h3p-Complete written security audits and risk assessments (excellent writing skills are required)/pp-Complete written policies, process and procedure documents (excellent writing skills are required)/pp-Assist in communicating and facilitating the requirements for security risk assessments for custom developed and third-party applications; and other technology services within the departments Infrastructure./pp-Assist in identifying and communicating application control deficiencies and the associated risks./pp-Develop action plans and/or recommend alternate solutions to resolve exceptions to standard operating procedures./pp-Provides security consulting and advisory services to business units and project teams./ph3Qualifications/h3p- Bachelor degree with six years of information security experience; or bachelor degree with three years of security risk assessment experience/pp- Excellent technical writing skills/pp- Firm understanding of information security policies, standards, industry best practices, and frameworks. (ISO 27K, NIST 800 series, FISMA, BITS etc.)/pp- Firm understanding of network security, OSI model, and information security architecture/ppDemonstrated experience in penetration testing/vulnerability mgmt tools and techniques/p/div