Information Security GRC Systems Analyst

Harris County•Houston, TX

16h•Hybrid

About The Position

Harris County Universal Services is transforming the way the County does business and seeking a Information Security GRC Systems Analyst to join our team. Universal Services is the enterprise IT solutions center for the departments and offices of Harris County, providing Information Technology, Public Safety and Justice Technologies, 311 Constituent Engagement Services, Fleet Services, and Records and Information Governance Services. Harris County is the third largest and most diverse county in the nation, with a population of more than 4.7 million. Harris County Commissioners Court, the County’s governing body, directs a budget of more than $4 billion providing essential services including flood control, infrastructure, healthcare, housing, and justice administration. This is a great time to join Universal Services as we enhance critical services to Harris County residents and internal customers. The Information Security Analyst – Governance, Risk & Compliance (GRC) performs all procedures necessary to ensure the security of information and information systems, protecting systems from intentional or inadvertent access, alteration, or destruction.

Requirements

Minimum: High School diploma or G.E.D. from an accredited educational institution.
Strong interpersonal and communication skills; able to build collaborative relationships across departments.
Ability to analyze complex problems, assess risk, and recommend effective, business-aligned solutions.
A self-starter with passion for cybersecurity, adaptability, and a team-oriented approach.
Working knowledge of security regulations such as CJIS, HIPAA, PCI-DSS, and Privacy Act.
Experience mentoring others and conducting security training sessions.
Applicants for this position will be subject to a criminal background check that includes being fingerprinted. This applies to any position with network access to Criminal Justice Information Services (CJIS) or access to an area where CJIS is received, maintained or stored either manually or electronically (i.e. custodian, maintenance).
Automatic Disqualification: Convictions, probation, or deferred adjudication for any Felony, and any Class A Misdemeanor
Convictions, probation, or deferred adjudication for a Class B Misdemeanor, if within the previous 10 years
Open arrest for any criminal offense (Felony or Misdemeanor)
Family Violence conviction

Nice To Haves

Bachelor’s degree in Information Technology, Cybersecurity, or related field.
Experience consulting with stakeholders on security best practices, network controls, and regulatory requirements.
Proficiency with Governance, Risk & Compliance (GRC) tools.
Familiarity with productivity platforms such as Microsoft 365 (Word, Excel, PowerPoint, Outlook), Teams, SharePoint, QuickBase, and Power BI.

Responsibilities

Serve as a subject matter expert and/or provide direction on processes, projects, and issues related to Cloud Security, with emphasis on Microsoft Azure.
Conduct security risk assessments for cloud, hybrid, and on-premise IT solutions and infrastructure.
Utilize cloud security controls to enhance security posture and research emerging threats affecting cloud and hybrid cloud environments.
Develop, manage, and coordinate security risk assessments for: Third-party vendors, Internally developed/managed applications and systems.
Ensuring alignment with the Confidentiality, Integrity, and Availability (CIA) triad.
Assess and prioritize information security risk; facilitate compliance with regulatory requirements and internal security policies.
Plan, research, and evaluate cybersecurity architecture for infrastructure projects (cloud and on-premise).
Identify security design gaps in proposed architectures and recommend improvements.
Lead the evaluation, design, and implementation of new security solutions and technologies.
Develop and maintain IT security policies, standards, procedures, and guidelines, including exception management processes.
Create policy drafts, procedures, educational content, strategy/technology roadmaps, metrics packages, RFPs/RFOs, project plans, communications, and executive-level presentations.
Design and implement tools/processes to monitor and govern security control effectiveness.
Maintain dashboards and reports to communicate security risks and compliance status.
Present cybersecurity risks and remediation plans to stakeholders; track and ensure timely closure of open issues.
Participate in ongoing updates and management of the Harris County Cybersecurity Framework and cybersecurity policies.
Balance business needs with security priorities and communicate risk effectively to leadership.
Evaluate and assist with the adoption of emerging security tools and solutions.
Lead or serve as a subject matter expert on complex, multi-disciplinary security projects.
Coach and mentor junior managerial and technical staff.
Conduct cybersecurity training and awareness sessions as needed.
Perform other duties as assigned.