Story County · 11 hours ago
Cybersecurity Analyst
Story County is seeking a Cybersecurity Analyst responsible for continuous monitoring, vulnerability management, incident response, policy development, and employee security awareness. The Analyst will evaluate and maintain the County’s security posture across all systems, networks, and applications to ensure compliance and data integrity.
Facilities Support ServicesGovernmentInformation ServicesOnline Portals
Responsibilities
Monitors County networks, servers, and endpoints for vulnerabilities, threats, or breaches using SIEM and intrusion detection tools
Responds to alerts and incidents from firewalls, antivirus, email filters, and endpoint protection systems
Conducts vulnerability assessments, risk assessments, and authorized penetration testing activities to identify and mitigate security risks
Develops and maintains cybersecurity policies, standards, and procedures in alignment with CJIS, HIPAA, and NIST frameworks
Coordinates the modernization, maintenance, and periodic testing of the Incident Response Plan, Discovery Recovery Plan, Continuity of Operations Plan/Continuity of Government (COOP-COG), and recovery processes
Manages user access controls and enforces least-privilege principles across County systems
Monitors, configures, and maintains Countywide system auditing and logging to ensure comprehensive event tracking, compliance, and timely detection of anomalies or unauthorized activity
Researches, recommends, and assists in implementing/managing security technologies including firewalls, multifactor authentication, and encryption solutions
Supports cybersecurity aspects of election infrastructure and other critical systems
Helps coordinate Countywide cybersecurity awareness and training programs for all employees
Assists in tabletop exercises, business continuity and disaster recovery planning
Collaborates with IT staff, vendors, and department heads to assess risk, review contracts, and ensure vendor compliance with County security requirements
Prepares reports on incidents, vulnerabilities, and cybersecurity trends for the IT Director and Board of Supervisors as requested
Stays informed on emerging threats, tools, and regulatory changes affecting cybersecurity
Assists with County cybersecurity insurance requirements, assessments, and incident documentation as needed
Performs related duties as assigned
Qualification
Required
Knowledge and level of competency commonly associated with the completion of a baccalaureate degree in Cybersecurity, Computer Science, Information Technology, or related field
Sufficient experience to understand the basic principles relevant to the major duties of the position, usually associated with the completion of an apprenticeship/internship or having had a similar position for at least three years
Possession of Security+, CySA+, or equivalent certification required upon hire or within six (6) months
Must obtain NCIC certification within six (6) months of employment
Possession of or ability to readily obtain a valid driver's license issued by the State of Iowa for the type of vehicle or equipment operated
Preferred
CISSP, CISM, CEH, or equivalent advanced certification preferred
Company
Story County
Story County, Iowa is located in the central part of the State of Iowa.
Funding
Current Stage
Growth StageCompany data provided by crunchbase