Cybersecurity Specialist 1

Georgia Department of Revenue•Atlanta, GA

4d•$65,100 - $83,500•Hybrid

About The Position

The Georgia Technology Authority is seeking a Cybersecurity Specialist 1 for its Office of Information Security. This role participates in information security projects and helps ensure that people, processes, and technology align with the organization’s desired security posture. The specialist supports the agency’s security needs across multiple locations and reports directly to the Information Security Officer (ISO) or Cyber Section Lead. The Georgia Technology Authority manages IT infrastructure services for 89 Executive Branch agencies and managed network services for more than 1,200 state and local government entities. The position is hybrid, with 2 to 3 days in-office, at 47 Trinity Avenue SW., Atlanta, Georgia. The listed hiring salary is $65,100–$83,500.

Requirements

Associate degree in Computer Science, Information Technology, Information Security, or a related field or equivalent experience, plus two years of proven experience and demonstrated success in technology leadership emphasizing information security and data governance; alternatively, four years of such experience and demonstrated success.
Hold an entry-level cyber certification recognized by state guidelines, or obtain one within 12 months of the start date. Listed certifications include Security+, Network+, Linux+, MTA, and GISF; any GIAC-certified entry-level certification is accepted.
Must hold or be able to qualify for a U.S. Department of Homeland Security clearance.
Must be flexible and available after core business hours, and able to travel to and from incidents throughout Georgia.
Comfort working in a restricted environment with limited connectivity.

Nice To Haves

Knowledge of cybersecurity best practices, frameworks, and regulations, including the listed NIST Special Publications, NIST FIPS, NIST Cybersecurity Framework, ISO 27000 Series, CIS CSC, FISMA, HIPAA, CJIS, SSA, and PCI-DSS.
Knowledge of Microsoft Active Directory, Microsoft enterprise security best practices, Windows application server platforms, and end-user applications.
Working knowledge of enterprise network solutions, delivery technologies, and engineered network security solutions.
Project management experience.
Strong oral and written communication skills, including the ability to explain complex technology in simple terms to key stakeholders.
Knowledge of cyber risk management concepts, principles, and practices, and/or compliance practices.
Experience developing cybersecurity and business processes and integrating new processes into existing ones.
Experience managing information security training and awareness programs, including familiarity with reporting metrics and KPIs.

Responsibilities

Assist with developing and enforcing policies and plans that comply with laws, regulations, policies, and standards for organizational IT and cybersecurity activities.
Communicate organizational cyber risks to management and agency business owners.
Manage assigned resources to support IT and security goals and reduce organizational risk.
Advise management on technology and information system policy matters, and keep the agency ISO informed of critical information security issues.
Provide status reporting on security projects and cybersecurity maturity using dashboards as directed.
Support audit and compliance, security awareness training, vulnerability assessment, risk assessment, network security, endpoint security, product evaluation, and security solution implementation.
Assist with agency cyber incident management and plan and conduct tabletop exercises.
Assist with disaster recovery and business continuity planning.
Maintain working knowledge of IT and cybersecurity support contracts and develop and maintain relationships with IT and cybersecurity partners.
Perform other duties as assigned.