Cybersecurity Specialist 1

Technology Authority, Georgia•Atlanta, GA

2d•Hybrid

About The Position

The Georgia Technology Authority (GTA) is seeking a Cybersecurity Specialist 1 for its Office of Information Security. The role participates in information security projects and helps ensure that people, processes, and technology align with the organization’s desired security posture. The specialist supports the agency’s security needs and employees across multiple locations. The position reports directly to the Information Security Officer (ISO) or Cyber Section Lead. GTA manages IT infrastructure services for 89 Executive Branch agencies and managed network services for more than 1,200 state and local government entities. The position is hybrid, based at 47 Trinity Avenue SW in downtown Atlanta, with two to three days in the office. The hiring salary range is $65,100–$83,500. The employee must be flexible to work after core business hours and travel throughout Georgia to incidents, and must be comfortable working in restricted environments with limited connectivity.

Requirements

An associate degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent experience, plus two years of proven experience and demonstrated success in technology leadership emphasizing information security and data governance; alternatively, four years of such experience and demonstrated success.
Hold an entry-level cyber certification recognized under state guidelines, or obtain one within 12 months of the start date. Listed certifications include Security+, Network+, Linux+, MTA, and GISF; any GIAC-certified entry-level certification is accepted.
Hold or be able to qualify for a U.S. Department of Homeland Security clearance.
Be available after core business hours and travel to and from incidents throughout Georgia.
Be comfortable working in a restricted environment with limited connectivity.

Nice To Haves

Knowledge of cybersecurity best practices, frameworks, and regulations, including NIST Special Publications, NIST FIPS, the NIST Cybersecurity Framework, ISO 27000 Series, CIS CSC, FISMA, HIPAA, CJIS, SSA, and PCI-DSS.
Knowledge of Microsoft Active Directory, Microsoft enterprise security best practices, Windows application server platforms, and end-user applications.
Working knowledge of enterprise network solutions, delivery technologies, and engineered network security solutions.
Project management experience.
Strong oral and written communication skills, including the ability to explain technical complexity clearly to key stakeholders.
Knowledge of cyber risk management concepts, principles, and compliance practices.
Experience developing cybersecurity and business processes and integrating new processes into existing ones.
Experience managing information security training and awareness programs, including familiarity with metrics and KPI reporting.

Responsibilities

Assist with developing and enforcing policies and plans that comply with laws, regulations, policies, and standards supporting organizational IT and cybersecurity activities.
Communicate organizational cyber risks to management and agency business owners.
Manage assigned resources in support of IT and security goals and objectives to reduce organizational risk.
Advise management on technology and information system policy matters, and keep the agency ISO informed of critical information security issues.
Provide status reporting on security projects and cybersecurity maturity using dashboards as directed.
Support audit and compliance, security awareness training, vulnerability assessment, risk assessment, network security, endpoint security, product evaluation, and security solution implementation.
Assist with agency cyber incident management and plan and conduct tabletop exercises.
Assist with disaster recovery and business continuity planning.
Maintain working knowledge of IT and cybersecurity support contracts and maintain necessary relationships with IT and cybersecurity partners.
Perform other duties as assigned.