IT Security Risk Analyst(32545)

IDEALFORCE has a Contract position available immediately for a IT Security Risk Analyst to join our customer in Phoenix Arizona. This is an ONSITE position. Please find below additional details about this job. Kindly respond with your most up to date resume if you would like to pursue this opportunity.

This role will be part of the Infrastructure Protection unit within the Information Technology Group of the Arizona Department of Transportation. This position engages with multiple risk, compliance, business area management, technology owners and external stakeholders. The position will provide timely and quality service to ensure that financial, regulatory, and compliance risks are adequately identified, communicated, and tracked for remediation. This position is primarily responsible for executing security risk assessments and policy, process and procedure documentation in accordance with statewide standards, industry standards and best practices. Excellent writing skills are required as the majority of work includes documentation output / deliverables.​

-Complete written security audits and risk assessments (excellent writing skills are required)

-Complete written policies, process and procedure documents (excellent writing skills are required)

-Assist in communicating and facilitating the requirements for security risk assessments for custom developed and third-party applications; and other technology services within the department's Infrastructure.

-Assist in identifying and communicating application control deficiencies and the associated risks.

-Develop action plans and/or recommend alternate solutions to resolve exceptions to standard operating procedures.

-Provides security consulting and advisory services to business units and project teams.

- Bachelor degree with six years of information security experience; or bachelor degree with three years of security risk assessment experience

- Excellent technical writing skills

- Firm understanding of information security policies, standards, industry best practices, and frameworks. (ISO 27K, NIST 800 series, FISMA, BITS etc.)

- Firm understanding of network security, OSI model, and information security architecture

Demonstrated experience in penetration testing/vulnerability mgmt tools and techniques

​

- "All your information will be kept confidential according to EEO guidelines". - All candidates who are authorized to work in US are encouraged to apply. - Candidates must clear the Background check prior to commencing the assignment.

SOURCER ASSIGNED:

Pete Tylor; Email: pete dot tylor at idealforce.com

Disclaimer :

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.