Information Security Analyst

State of Indiana•Indianapolis, IN

About The Position

The Information Security Analyst safeguards the Indiana Department of Environmental Management’s information assets, protecting the confidentiality, integrity, and availability of environmental data and technology systems. The role monitors endpoints, networks, cloud services, and vendor systems for security signals, threats, and vulnerabilities, and conducts vulnerability assessments, risk analyses, and audits to help prevent impacts to operations. It also designs and implements technical and procedural controls, including alerts, dashboards, and compliance documentation. The analyst leads or supports security incident investigation, containment, eradication, and recovery, and prepares incident reports, root cause analyses, and remediation plans. The role also helps maintain security policies and procedures, protect data transmissions, manage access, and promote security awareness among users. Weekend work may be required. This position is exempt from overtime compensation; additional work hours may be required to complete essential or assigned duties.

Requirements

Strong knowledge of a broad array of security software applications and tools.
Strong understanding of computer-related security systems, including firewalls and encryption.
Strong knowledge of state and federal legislation and regulatory laws pertaining to information-system security and privacy.
Strong technical writing and research skills.
Strong problem-solving and analytical skills.
Excellent verbal and written communication skills.
Ability to prioritize, meet deadlines, and manage changing priorities.
Ability to understand and apply complex computer logic to job duties.
Ability to identify and mitigate network vulnerabilities.
Ability to work autonomously and handle multiple assignments.
Ability to perform essential functions with or without reasonable accommodation.

Nice To Haves

A degree is not required; at least 5 years of experience applying the outlined knowledge, skills, and abilities in a similar role may be considered.

Responsibilities

Assist in developing plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data-processing needs.
Monitor reports of computer viruses and determine when virus-protection systems should be updated.
Assist with data transmissions and help build firewalls to protect confidential information and prevent corrupt digital transfers.
Perform risk assessments and test data-processing systems to verify their operation and security measures.
Assist with modifying computer security files to incorporate software, correct errors, or change individual access status.
Support responses to violations of computer security procedures and discuss procedures with violators to help prevent repeat violations.
Document computer-security and emergency-measures policies, procedures, and tests.
Consult with users about data-access needs, security violations, and programming changes.
Monitor data-file use and regulate access to safeguard information.
Coordinate implementation of computer-system plans with agency personnel and outside vendors.
Train users and promote security awareness to support system security and improve server and network efficiency.
Conduct vulnerability assessments, risk analyses, and audits to identify and mitigate threats.
Design and implement technical and procedural security controls, including threshold-based alerts, dashboards, and compliance documentation.
Lead or support incident investigation, containment, eradication, and recovery; prepare incident reports, root cause analyses, and remediation plans.
Continuously monitor endpoints, networks, cloud services, and vendor systems for health signals, threats, and vulnerabilities.

Benefits

Three medical plan options, including prescription coverage, plus vision and dental plans.
Wellness Rewards Program with gift card rewards for completing wellness activities.
Health savings account with a biweekly state contribution.
Deferred compensation 457(b) account with employer match.
Two fully funded pension plan options.
Leave policies, including 150 hours of paid New Parent Leave and up to eight weeks of paid Childbirth Recovery Leave for eligible mothers.
Up to 15 hours of paid community service leave.
Combined 180 hours of paid vacation, personal, and sick leave.
12 paid holidays, or 14 in election years.
Education Reimbursement Program.
Group life insurance.
Referral Bonus program.
Employee assistance program with covered behavioral health visits.
Eligibility as a qualified employer for the Public Service Loan Forgiveness Program.
Free parking for most positions.
Free LinkedIn Learning access.