INFORMATION SECURITY ANALYST IV - 73000322

State of Florida•Tallahassee, FL

3d•Onsite

About The Position

The Information Security Analyst IV performs advanced analytical and consultative work in support of the Department’s Information Security Program. This position is responsible for interpreting statutory, regulatory, framework, and audit requirements and translating them into actionable security control expectations, implementation guidance, ownership structures, evidence requirements, and related governance processes that can be applied across the Department’s technology environment. The position supports the proactive management of security controls by helping improve control clarity, strengthen governance and documentation practices, reduce ambiguity in how requirements are understood and applied, and enhance the Department’s ability to demonstrate compliance through normal operations. This work requires collaboration with technical staff, managers, auditors, service owners, and other stakeholders to promote consistent implementation of security expectations, support audit readiness, and advance continuous improvement in the Department’s overall security and compliance posture.

Requirements

Five years of professional experience in cybersecurity, technology analysis, compliance, audit, governance, risk management, or related work.
One year of professional experience must have duties related to compliance, audit, or control interpretation.

Nice To Haves

One year of experience interpreting or applying cybersecurity, compliance, audit, or control requirements in an operational environment.
One year of experience developing, maintaining, or supporting security-related documentation, processes, workflows, standards, or governance activities.
One year of experience working in an environment aligned with regulatory or security frameworks, to include 60GG-2, section 282.318, Florida Statutes, NIST Cybersecurity Framework, IRS Publication 1075, or similar requirements.
One year of experience supporting cybersecurity compliance, audit response, corrective action tracking, or control documentation.
Six months of experience using a governance, risk, and compliance platform, work management system, or structured workflow tool such as Onspring or similar tools.
One year of experience developing procedures, standards, guidance, or other formal documentation.
One year of experience coordinating with technical teams, managers, auditors, and other stakeholders in a regulated or compliance-driven environment.