INFORMATION SECURITY ANALYST IV

Information Security Analyst IV

The Information Security Analyst IV serves as the senior-level lead responsible for the administration, operation, and continuous improvement of the organization's Vulnerability Management Program. This position is responsible for identifying, assessing, prioritizing, tracking, and reporting cybersecurity vulnerabilities across enterprise systems, applications, and network infrastructure. The analyst provides strategic oversight of vulnerability scanning technologies, coordinates remediation efforts with technical stakeholders, and ensures timely mitigation of identified risks in alignment with organizational security policies and regulatory requirements.

Minimum Qualifications for this position include the following REQUIRED ENTRY LEVEL KNOWLEDGE, SKILLS AND ABILITIES:

• Knowledge of Florida statutes, rules related to IT and information security.
• Knowledge of National Institute of Standards and Technology (NIST) security standards.
• Knowledge of vulnerability management frameworks, lifecycle processes, and industry best practices.
• Knowledge with enterprise vulnerability scanning tools such as Tenable, Qualys, Rapid7, or equivalent platforms.
• Knowledge of CVE, CVSS, CWE, patch management, and common attack vectors.
• Knowledge of operating systems, network protocols, firewalls, cloud platforms, databases, and enterprise applications.
• Knowledge of security standards and frameworks such as NIST SP 800-53, NIST CSF, CIS Controls, and ISO 27001.
• Ability to interpret technical vulnerability data and translate findings into actionable remediation guidance.
• Ability to manage multiple priorities and coordinate cross-functional remediation efforts in complex enterprise environments.
• Ability to analyze, interpret and operationalize statutes, rules, guidelines, policies and procedures.
• Ability to write policies, procedures and guidelines.
• Ability to analyze and interpret computer related data.
• Ability to communicate business information effectively and in writing to users and information technology personnel.
• Ability to work independently.
• Ability to determine work priorities, assign work and ensure proper completion of work assignments.
• Ability to communicate effectively in oral and written form.
• Skilled in establishing and maintaining effective working relationships with others.
• Skilled in analytical, organizational, and communication with the ability to present technical information to both technical and non-technical audiences.