IT SECURITY ANALYST I

Position Number: County: Pulaski Posting End Date: 10/20/2026 Anticipated Starting Salary: $66,458

Position Specifics:

The Office of Arkansas Lottery (OAL) IT Security Analyst is responsible for safeguarding the OAL operating systems, overseeing network security, and ensuring the integrity and confidentiality of data in compliance with state and federal regulations. This position plays a critical role in monitoring the gaming systems and online vendor systems, focusing on firewall management, identifying vulnerabilities, and providing secondary support for in-state draw games. The OAL IT Security Analyst will work closely with the IT department to maintain secure operations, protect sensitive information, assist in the overall cybersecurity strategy for OAL and handle other duties as assigned. Preferred Qualications: A bachelor’s degree in Information Technology, Computer Science, or a related field, plus two (2) years of experience in information security, network monitoring, or cybersecurity roles are required. Strong problem-solving abilities to assess security threats, evaluate potential vulnerabilities, and devise effective solutions to mitigate risks. Highly detail-oriented, with the ability to identify even subtle discrepancies or vulnerabilities in systems that could compromise security. Excellent communication skills, both written and verbal, to document incidents, explain complex security matters to non-technical staff, and collaborate with external vendors. Ability to make swift decisions under pressure, particularly in response to security incidents or breaches. The mission of the Department of Finance and Administration is to provide Arkansas citizens convenient, effective, and courteous service which will encourage voluntary compliance with tax, license, and child support laws. Position Information

Job Series:

Information Technology – IT Security Classification:

IT Security Analyst I Class Code:

IIE02P Pay Grade:

IST06 Salary Range:

$66,458 – $108,431 Job Summary

The IT Security Analyst I is responsible for protecting an agency’s or organization’s computer systems, networks, and data from cyber threats and vulnerabilities. This role involves monitoring security systems, analyzing potential risks, responding to incidents, and implementing measures to safeguard sensitive information. The IT Security Analyst I works proactively to identify weaknesses, maintains compliance with security standards, and ensures the confidentiality, integrity, and availability of organizational data. Primary Responsibilities

Monitor network traffic, systems, and applications for suspicious activity and potential threats. Perform vulnerability assessments and penetration testing to identify and mitigate security risks. Investigate, document, and respond to security incidents, breaches, and anomalies. Develop and implement security policies, standards, and procedures to protect information technology infrastructure. Collaborate with information technology teams to ensure secure configurations of systems and applications. Maintain and update security tools such as firewalls, antivirus software, and intrusion detection systems. Conduct regular security audits and risk assessments to ensure compliance with industry standards. Provide security awareness training to employees to promote best practices. Research and evaluate emerging security technologies and threats to recommend innovative solutions. Prepare detailed reports on security incidents, vulnerabilities, and risk mitigation strategies. Knowledge and Skills

Excellent analytical and problem-solving skills to detect and resolve security threats. Strong attention to detail and ability to work under pressure in high-stakes situations. Effective communication skills for reporting incidents and providing recommendations to technical and non-technical personnel. Proactive mindset with the ability to anticipate and prevent potential security breaches. Commitment to continuous learning to stay current with evolving cybersecurity threats and technologies. Minimum Qualifications

Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field. Familiarity with regulatory requirements and frameworks such as General Data Protection Regulation or Payment Card Industry Data Security Standard. Strong understanding of network protocols, operating systems, and cloud security principles. Satisfaction of the minimum qualifications, including years of experience and service, does not entitle employees to automatic progression within the job series. Promotion to the next classification level is at the discretion of the department and the Office of Personnel Management, taking into consideration the employee’s demonstrated skills, competencies, performance, workload responsibilities, and organizational needs. Licensure/Certifications

N/A OTHER JOB RELATED EDUCATION AND/OR EXPERIENCE MAY BE SUBSTITUTED FOR ALL OR PART OF THESE BASIC REQUIREMENTS, EXCEPT FOR CERTIFICATION OR LICENSURE REQUIREMENTS, UPON APPROVAL OF THE QUALIFICATIONS REVIEW COMMITTEE. The State of Arkansas is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, pregnancy, age, disability, citizenship, national origin, genetic information, military or veteran status, or any other status or characteristic protected by law. ONLY COMPLETED APPLICATIONS WITH WORK HISTORY WILL BE ACCEPTED.

Applications must include complete work history and references. A resume may accompany the state application but will not be substituted for any part of the application. False, misleading, or incomplete statements may result in disciplinary action and possible termination.

Veteran Preference: A copy of a DD-214 must be submitted to the Hiring Official at the time of interview to be considered for Veteran Preference.

This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the Form I-9. For more information on E-Verify, or if you believe that your employer has violated its E-Verify responsibilities, please contact DHS at or dhs.gov/e-verify.