SENIOR INFO TECH BUS CONSULTANT - 37020868 jobs in United States
info-icon
This job has closed.
company-logo

State of Florida · 1 month ago

SENIOR INFO TECH BUS CONSULTANT - 37020868

The State of Florida's Department of Environmental Protection is seeking a Senior IT Business Consultant to serve as an information security engineer. This role involves creating and executing operational security initiatives to enhance the agency's information security posture and requires strong communication and technical skills.

Government Administration

Responsibilities

Assist with maintaining the information security incident response plans and procedures to comply with Florida State standards and rules. This includes:
Maintaining procedures to ensure security requirements are incorporated into the change control process
Maintaining the protection of the physical and virtual operating environment for agency-owned or managed IT resources
Maintaining a policy and procedure review process that facilitates continuous improvement of IAM security
Maintaining a policy and procedure review process that facilitates continuous improvement to security standards
Assist the Information Security Manager (ISM), with the following duties:
Establishing an information security program that includes information security policies, procedures, standards, and guidelines; an information security awareness program; an information security risk management process, including the comprehensive risk assessment required by section 282.318, F.S.; a Cybersecurity Incident Response Team; and a disaster recovery program that aligns with the agency’s Continuity of Operations Plan (COOP). Proactively researching latent security threats and recommending risk mitigation actions
Performing information security investigations in conjunction with the Inspector General’s Office and law enforcement agencies
Developing, maintaining, and executing the department’s IT Security Strategic Plan
Review and modify identity and access management policies
Review and modify firewall rules iteratively to be more secure
Respond to information security incidents and execute countermeasures
Review access requests and provide access control oversight when needed
Maintain technical skillset in order to adapt to new technologies as they emerge including researching and recommending security focused training for themselves and others in the division
Monitor e-mail filtering and spam control systems and configure as necessary to improve security
Ensure cryptographic standards are maintained in systems and applications
Assist with ensuring compliant CJIS (criminal justice) systems, and recommend technologies and procedures for on-premise and cloud-based CJIS infrastructure
Evaluate desktop policies to ensure proper patching levels and security policies are maintained
Assist the ISM with strategic tasks including information security risk assessments, audits and governance
Perform other duties as assigned

Qualification

Enterprise cybersecurity experienceInformation security policiesCybersecurity incident responseIdentityAccess managementNetwork security methodologiesCloud architectureTechnical information securityTroubleshooting skillsCommunication skillsCollaboration skills

Required

Superior communication skills, both verbal and written
Extensive experience in technical information security roles
Experience with principles of enterprise information security
Experience in researching and implementing security technologies
Experience with computer networking concepts and protocols, and network security methodologies
Experience in analyzing network traffic and packet-level analysis
Knowledge of cyber threats and vulnerabilities
Knowledge of business continuity and disaster recovery continuity of operations plans
Knowledge of cyber attackers (e.g., hacktivists, insider threat, non-nation state sponsored, and nation sponsored APT)
Experience in recognizing and categorizing types of vulnerabilities and their associated attacks
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code)
Knowledge of Cloud service models
Experience in identifying, capturing, containing, and reporting malware
Experience in troubleshooting security events on windows endpoint and server operating systems
Experience in working with organization's information classification program and procedures for information compromise
Experience in designing and implementing IAM policies for both on prem and cloud-based identity management
Excellent coordination and collaboration skills
Ability to maintain a valid driver's license and travel, as needed
3 years of enterprise cybersecurity work experience
Experience in Cybersecurity incident response
Experience participating in Cybersecurity or IT audits
Experience with Active Directory
Experience with cloud architecture
Valid Driver's License

Benefits

Annual and Sick Leave benefits
Nine paid holidays and one Personal Holiday each year
State Group Insurance coverage options, including health, life, dental, vision, and other supplemental insurance options
Retirement plan options, including employer contributions
Tuition waivers
Total Compensation Estimator Tool
And more!

Company

State of Florida

company-logo
The State of Florida is an online telephone and email directory for state government agencies and employees in Florida.

Funding

Current Stage
Late Stage

Leadership Team

leader-logo
Richard Herstein, MD, MHA, MBA
Chief Hospital Administrator (CEO) and Chief Medical Officer (CMO)
linkedin
leader-logo
Jimmy Patronis
Chief Financial Officer
linkedin
Company data provided by crunchbase