IS Applications Analyst 2 - Cybersecurity and Compliance

Metropolitan Government of Nashville & Davidson County•Nashville, TN

About The Position

The Metropolitan Nashville Police Department (MNPD) is seeking a Cybersecurity and Compliance Analyst classified as an IS Applications Analyst 2. The position performs departmental information security and compliance operations and reports directly to MNPD’s IT Security Manager. Under general supervision, the analyst collaborates with MNPD IT sections and Metro ITS Information Security to maintain a secure, CJIS-compliant technology environment supporting public-safety operations. MNPD operates 24/7/365. The role supports communications within Metro and between Metro and the public, and includes on-call support as required for Police IT operations, with potential on-site response outside standard business hours. The position may also attend off-site meetings, trainings, or conferences related to information security, compliance, and technology operations. Employees must reside in Tennessee or become residents within six months of employment.

Requirements

Four years of experience in information technology security and compliance operations; additional education in an IT-related degree field may be considered in lieu of some experience at a 1:1 ratio.
Valid driver license.
Reside in Tennessee or become a Tennessee resident within six months of employment.
Ability to support on-call duties as required, including potential on-site response outside standard business hours.

Nice To Haves

Attainment of a security certification such as CompTIA Security+ or ISC2 Certified in Cybersecurity.
Experience with CJIS-aligned security controls, risk assessments, and compliance audits.
Ability to communicate security requirements and risks effectively to technical and non-technical personnel.

Responsibilities

Perform Police IT assignments to support compliance with the FBI CJIS Security Policy, Metro Government Information Security Framework, and applicable MNPD policies.
Communicate CJIS and other security alerts, advisories, and directives to MNPD IT personnel and affected divisions.
Collect, organize, update, and maintain information security documentation, including system security configurations, diagrams, inventories, and audit artifacts.
Collect and review routine internal and external information security audits.
Assist with developing, maintaining, and disseminating MNPD information security policies, procedures, standard operating procedures, and security guidelines.
Administer and monitor security technologies, including identity and access management tools, endpoint and mobile device security solutions, logging and monitoring platforms, network security controls, and vulnerability management systems.
Conduct periodic reviews of user access, system permissions, encryption status, patch levels, and other required CJIS security controls.
Collaborate with Metro ITS Enterprise Security on Metro-wide security initiatives, incident response coordination, and risk management activities.
Assist with incident reporting, documentation, tracking, and remediation.
Assist with delivering security awareness training and guidance to MNPD personnel, contractors, and partner agencies.
Assist with vendor security compliance evaluations.
Participate in disaster recovery and continuity of operations planning.
Attend off-site meetings, trainings, or conferences related to information security, compliance, and technology operations.
Perform on-call support as required for Police IT’s 24/7/365 technology operations, including potential on-site response outside standard business hours.
Perform additional duties as assigned.