Please paste the following URL into a browser to view the entire job posting on the CAPPS Careers page.https://erphcmprd.cpa.texas.gov/psp/candidateportal/EMPLOYEE/HRMS/c/HRS HRAM FL.HRS CG SEARCH FL.GBLPage=HRS APP JBPST FLandAction=UandFOCUS=ApplicantandSiteId=1andJobOpeningId=102923andPostingSeq=1Job DescriptionPLEASE NOTE: All applications must contain complete job histories, which includes job title, dates of employment, name of employer, supervisor's name and phone number and a description of duties performed. If this information is not submitted, your application may be rejected because it is incomplete. Resumes do not take the place of this required information.SUBMITTED THROUGH WORK IN TEXAS: Work In Texas (WIT) applicants must complete the supplemental questions to be considered for the posting. In order to complete the supplemental questions please go to CAPPS Recruit to register or login and access your profile. Go to CAPPS Recruit to Sign In https://erphcmprd.cpa.texas.gov/psc/candidateportal/EMPLOYEE/HRMS/c/HRS HRAM FL.HRS CG SEARCH FL.GBLFOCUS=ApplicantandGENERAL DESCRIPTION: Performs moderately complex (journey-level) information security and cybersecurity analysis work. Work involves learning and assisting with monitoring security measures for information systems and infrastructures to regulate access to computer configuration and data files and to prevent unauthorized modification, destruction, or disclosure of information. Work also involves conducting security risk management activities including security control assessments, system and network risk assessments, and communication of risk levels to technical and non-technical audiences. Works under general supervision, with moderate latitude for the use of initiative and independent judgment.The following Military Occupational Specialty codes are generally applicable to this position.Link Here: https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC MedicalandHealth.pdf Applicants must fully complete the summary of experience to determine if minimum qualifications are met.ESSENTIAL DUTIES / RESPONSIBILITIES: 1. Perform technical risk assessments and reviews of account permissions, computer data access needs, security violations, programming changes, and new and existing applications and systems, including data center physical security and environment.2. Advise management and users regarding security procedures.3. Research and analyze cybersecurity threat indicators and their behaviors for the prevention, detection, containment, and correction of data security breaches, and recommends threat mitigation strategies.4. Support the implementation of information system security plans with agency personnel and outside vendors.5. Support privacy impact assessments and assists in documenting/organizing data privacy and policy requirements.6. Review agency contracts to ensure appropriate security requirements are included and adhered to.7. Ensure the NIST risk management process is followed and evangelize adoption of best practices.8. Assist with basic data classification and tagging based on policy procedures.9. Attend work regularly and observe approved work hours in accordance with agency leave and attendance policies.10. Perform other duties as assigned.GENERAL QUALIFICATIONS and REQUIREMENTS: Education: High School Diploma/equivalent required. Graduation from an accredited two-year college with major course work in computer science, information technology, or a related discipline is preferred.Experience: Completion of Cybersecurity Analyst-related internship OR minimum of one (1) years experience performing cybersecurity analysis, information security analysis, or information assurance is preferred.Substitution Note: Additional work experience of the type described or other related education may be substituted for one another on a year-for-year basis. Licensure and/or Certification: One or more of the following certifications within (1) year of hire:Security+, Network+, CCNA, Linux+, A+, FNS, FIS, FCF, VCA, CCThis list is not all inclusive. Alternative certifications may be accepted at the discretion of management.Note: Certifications from a higher tier may also be substituted. If driving is required, must possess a valid driver license from state of residence. Critical Organizational Infrastructure requirements: This job may be responsible for conducting research on, working on, or having the ability to access critical organizational infrastructure; must be able to maintain the security and integrity of the infrastructure related to this role. Additionally, and more specifically, must not be employed by nor have any connection or continuous connections to any governmental entity or political apparatus of a country listed in 15 C.F.R. 791.4.Regulatory knowledge: Working knowledge of, or the ability to rapidly assimilate information related to TXDPS, State and Federal regulations, legislation, guidelines, policies and procedures. Technology: Proficiency with Microsoft Office and appropriate levels of proficiency with utilized software and systems (e.g. CAPPS, SharePoint) and be able to learn new software/systems.Interpersonal Skills: Must demonstrate an ability to exercise poise, tact, diplomacy and an ability to establish and maintain positive, working/professional relationships with internal/external customers. Must demonstrate DPS core values: Integrity, Excellence, Accountability, and Teamwork.Organizational and Prioritization Skills: Must be organized, flexible, and able to effectively prioritize in a multi-demand and constantly changing environment; able to meet multiple and sometimes conflicting deadlines without sacrificing accuracy, timeliness or professionalism. Presentation/Communication Skills: Must be able to construct and deliver clear, concise, and professional presentations and/or communications to a variety of audiences and/or individuals.Research and Comprehension
