Security Analyst-IV

This is a repost of a failed exclusive backfill that was for WI residents only.


This repost is now open to nationwide candidates and does not require relocation to WI.


The State of Wisconsin is looking for a Security Analyst IV.


Information Risk Management


Under the general guidance of the Chief Information Security Officer (CISO) and in cooperation with the Security Team Lead, this position is responsible for providing advanced security policy analysis. This position is responsible for developing and maintaining information security policies and workforce training and awareness. This position serves as a resource for staff and leaders regarding information security policy implementation, interpretation, and compliance This position may lead projects to implement new security controls. This position will also have daily, weekly, and monthly duties operating security control systems in place at ETF. It will monitor compliance with security policies and procedures.


Regular duties may include the following representative tasks:

• Information Security Risk Assessment: Identifies, analyzes, evaluates, and documents information security risks and controls based on established risk criteria.
• Risk Management: Measure, monitor and manage risks related to the use of Information Technology, Information Security, Privacy, Regulatory Compliance, and Governance. Ensures and monitors compliance with industry and government rules and regulations at all levels.
• Control Implementation : Assist the security team to conduct gap analysis and implements frameworks and standards such as ISO 27001, NIST, and CSC. Engage with your stakeholders to identify issues, understand their needs and challenges to proactively find ways the program can support those needs.
• Coordination: Provides coordination to the GRC team by setting goals, objectives, performance metrics, and ensuring that the team is aligned with the organization's mission3. Develops strategies to improve the effectiveness of the GRC program.

Top Required Skills and Years Experience:

• IT Security - 3+ years
• IT Professional - 5+ years
• Project leadership experience- 4+ years
• Experience evaluating or implementing vendor security offerings - 3+ years.
• Strong attention to detail
• Excellent communication skills (written and verbal)

Nice to Have Skills:

• CISSP or equivalent - 1 year

Interview:

• 1 round via Teams

Duration:

• 06/30/2025, likely to extend.

Onsite or Remote:

• This position can work 100% remote within the continental US or in the office.
• No WI residency required. Open to nationwide candidates.