Security Analyst III

Information Security Contract Support Specialist

The Department of Health Services (DHS) is one of the largest and most diverse state agencies in client location. DHS employs more than 7,000 staff spanning ten divisions and offices and seven 24/7 institutions located throughout client location. Programs and services administered by DHS include Medicaid and other human service programs, alcohol and other drug abuse prevention services, mental health, public health, and long-term care.

The Information Security Section (ISS) serves the Department by creating an information security culture and enabling the business. We are metrics minded, employee focused, and view security as a service. ISS is responsible for:

• Identifying and continuously assessing risk
• Developing, institutionalizing, and improving strategies to mitigate risk
• Limiting the potential effects of information security events
• The selection, assessment, authorization, and monitoring of security controls while contributing to the overall information security plan.

The Information Security Section (ISS) is functionally organized into Security Awareness and Governance, Compliance, Architecture, and Portfolio Management. Cross-team collaboration is essential to our success.

The Contract Support Specialist identifies and responds to risk posed to the Department through contracts, user agreements, and other agreements. This work is completed through detailed analysis of contract language, collaborating with other security staff, developing recommendations, and drafting alternate language. To successfully do this work, one must be detail oriented, have strong analytical skills, have strong oral and written communication skills and the ability to coordinate across multiple teams in order to arrive to an outcome.

A federally recognized (ANSI) information security certification must be maintained for this position. The Department of Defense (DOD) 8570 Baseline Certifications defined by Defense Information Systems Agency (DISA) is the baseline to consider when reviewing the relevance of the certification.

Goals and Worker Activities

Identify contractual-related risks

• Review software, iOS, cloud, and other purchasing contracts/terms of use for security risk
• Highlight other identified risk.
• Coordinate with security architects, liaisons, and other security analysts performing comprehensive assessment.
• Document and communicate analysis. Answer clarifying questions.
• Escalate to ISS leadership if an acceptable level of risk cannot be achieved

Respond to software and contract related risk arriving to an acceptable level of risk.

• Coordinate with other BITS staff, Office of Legal Counsel, Bureau of Procurement and Contracting, and program staff to establish compensating controls.
• Facilitate resolution as needed.

Review and submit cloud-review documentation to Division of Enterprise Technology. Serve as the primary point of contact for cloud reviews. Establish and documents standard operations for job-related activities. Establish and maintain positive working relationships with stakeholders. Participate and support Governance related activities

• Back-up the Governance Program Owner.

Other duties as assigned

• ISS SharePoint site administration
• Back-up other security staff as needed
• Write concept papers, proposals and briefs, and other documentation as necessary

Knowledge, Skills, and Abilities

• Well qualified candidate will have experience in information security, contracts, procurement, and/or legal.
• Demonstrated ability to solve complex problems, convey both oral and written instruction, and handle multiple task interruptions while providing services in a professional and courteous manner.
• Demonstrated attention to detail and organizational skills.
• Demonstrated ability to work effectively with customers to solve business challenges while balancing the need for confidentiality, integrity, and availability.
• Demonstrated commitment to fostering a diverse working environment.
• Demonstrated ability to work independently, as part of a team of peers, and also to support and contribute to a multidiscipline team environment.