Illinois Department of Innovation & Technology (DoIT)
Information Security Analyst (Information Systems Analyst II, Option S)
Illinois Department of Innovation & Technology (DoIT), Springfield, Illinois, us, 62777
Information Security Analyst (Information Systems Analyst II, Option S)
The Department of Innovation and Technology (DoIT) is seeking qualified candidates for an Information Security Analyst role supporting the Department of Human Services (DHS). The position involves complex professional software security evaluations and implementations for Integrated Eligibility Systems (IES) and functions as an advanced specialist in security administration, audit, and quality assurance. This role includes evaluating and implementing security administration software tools, establishing and monitoring access to the IES system, and generating security administration reports. Essential Functions
Under administrative direction, serves as an Information Security Analyst for DoIT, supporting DHS with complex software security evaluations and implementations for IES; acts as an advanced specialist in security administration, audit, and quality assurance. Consults with user and technical staff regarding audits and quality assurance functions and works to remediate external audit findings at state and federal levels. Establishes and monitors access to the IES system and generates security administration reports. Conducts in-depth studies involving substantial technical research and systems analysis of new system development and re-engineering of large complex systems to address security, audit, and quality assurance considerations. Produces IES documentation including hardware, software, and audit documentation; develops and provides written documentation of software configurations. Works with vendors and internal staff to document and resolve reported problems with existing IES security software systems. Provides end user support for IES security access and assists staff in resolving complex IES security access problems. Keeps current with developments in IT through ongoing education, meetings, training, seminars, and conferences. Performs other duties as required within the scope of the listed duties. Minimum Qualifications
Requires knowledge, skill, and development equivalent to four years of college coursework in computer science or related fields. Requires three years of professional experience in Systems Services or a related IT field. Specialized Skills
Three years of professional security analyst experience with NIST Cybersecurity Framework, NIST SP 800-53 controls, and external IT audit findings. Three years of professional experience as an IT audit liaison or remediating external or internal audit findings. Preferred Qualifications (In Order Of Significance)
Three years of professional security analyst experience with NIST CSF, NIST SP 800-53, and external IT audit findings. Three years of professional experience as an IT audit liaison or remediating external or internal audit findings. Three years of professional experience examining systems and procedures to identify adverse events, including vulnerabilities and compliance with security policies. One year of experience maintaining cooperative relationships while working on external audit or compliance issues. One year of experience developing risk assessments. Demonstrated verbal and written communication skills. Certifications: CISSP, CISM, CISA, or CIA. Conditions of Employment
Applicants must meet all conditions of employment, with or without reasonable accommodation. Must be able to verify identity and criminal history disclosure. Must have employment authorization to accept a permanent full-time position with the State of Illinois. Must be able to pass a position-specific background check. Must be able to use agency-provided equipment and attend seminars, conferences, and training to stay current on industry topics. Must be able to lift up to 20 pounds; this is considered light work. Must be able to travel in performance of duties and serve in an on-call capacity. Must be able to work overtime including evenings, weekends, and holidays. Work Hours
8:30 AM 5:00 PM, Monday Friday Work Location
100 South Grand Ave E, Springfield, Illinois, 62762 Agency Contact
Jessica.Jordan2@illinois.gov Posting Group
Science, Technology, Engineering & Mathematics This position contains Specialized Skills as used in CBAs. About DoIT
The Department of Innovation & Technology (DoIT) is the state's IT agency delivering statewide technology, innovation, and cybersecurity services. DoIT is committed to diversity, equity, and inclusion and values employees with diverse backgrounds and experiences. Application Instructions
Use the Apply button on this posting to begin the application process. State employees should sign in via the career portal for State of Illinois employees. Non-State employees should log in via the Illinois.jobs2web.com homepage. If you have questions about how to apply, please refer to the provided resources. The main form of communication will be via email; please check spam/junk folders for communications. #J-18808-Ljbffr
The Department of Innovation and Technology (DoIT) is seeking qualified candidates for an Information Security Analyst role supporting the Department of Human Services (DHS). The position involves complex professional software security evaluations and implementations for Integrated Eligibility Systems (IES) and functions as an advanced specialist in security administration, audit, and quality assurance. This role includes evaluating and implementing security administration software tools, establishing and monitoring access to the IES system, and generating security administration reports. Essential Functions
Under administrative direction, serves as an Information Security Analyst for DoIT, supporting DHS with complex software security evaluations and implementations for IES; acts as an advanced specialist in security administration, audit, and quality assurance. Consults with user and technical staff regarding audits and quality assurance functions and works to remediate external audit findings at state and federal levels. Establishes and monitors access to the IES system and generates security administration reports. Conducts in-depth studies involving substantial technical research and systems analysis of new system development and re-engineering of large complex systems to address security, audit, and quality assurance considerations. Produces IES documentation including hardware, software, and audit documentation; develops and provides written documentation of software configurations. Works with vendors and internal staff to document and resolve reported problems with existing IES security software systems. Provides end user support for IES security access and assists staff in resolving complex IES security access problems. Keeps current with developments in IT through ongoing education, meetings, training, seminars, and conferences. Performs other duties as required within the scope of the listed duties. Minimum Qualifications
Requires knowledge, skill, and development equivalent to four years of college coursework in computer science or related fields. Requires three years of professional experience in Systems Services or a related IT field. Specialized Skills
Three years of professional security analyst experience with NIST Cybersecurity Framework, NIST SP 800-53 controls, and external IT audit findings. Three years of professional experience as an IT audit liaison or remediating external or internal audit findings. Preferred Qualifications (In Order Of Significance)
Three years of professional security analyst experience with NIST CSF, NIST SP 800-53, and external IT audit findings. Three years of professional experience as an IT audit liaison or remediating external or internal audit findings. Three years of professional experience examining systems and procedures to identify adverse events, including vulnerabilities and compliance with security policies. One year of experience maintaining cooperative relationships while working on external audit or compliance issues. One year of experience developing risk assessments. Demonstrated verbal and written communication skills. Certifications: CISSP, CISM, CISA, or CIA. Conditions of Employment
Applicants must meet all conditions of employment, with or without reasonable accommodation. Must be able to verify identity and criminal history disclosure. Must have employment authorization to accept a permanent full-time position with the State of Illinois. Must be able to pass a position-specific background check. Must be able to use agency-provided equipment and attend seminars, conferences, and training to stay current on industry topics. Must be able to lift up to 20 pounds; this is considered light work. Must be able to travel in performance of duties and serve in an on-call capacity. Must be able to work overtime including evenings, weekends, and holidays. Work Hours
8:30 AM 5:00 PM, Monday Friday Work Location
100 South Grand Ave E, Springfield, Illinois, 62762 Agency Contact
Jessica.Jordan2@illinois.gov Posting Group
Science, Technology, Engineering & Mathematics This position contains Specialized Skills as used in CBAs. About DoIT
The Department of Innovation & Technology (DoIT) is the state's IT agency delivering statewide technology, innovation, and cybersecurity services. DoIT is committed to diversity, equity, and inclusion and values employees with diverse backgrounds and experiences. Application Instructions
Use the Apply button on this posting to begin the application process. State employees should sign in via the career portal for State of Illinois employees. Non-State employees should log in via the Illinois.jobs2web.com homepage. If you have questions about how to apply, please refer to the provided resources. The main form of communication will be via email; please check spam/junk folders for communications. #J-18808-Ljbffr