Management Analyst II - Information Security Associate

State of Maine•Augusta, ME

1d•Hybrid

About The Position

As an Information Security Associate, you will play a key role in supporting the State’s enterprise security program. This position combines program administration, analysis, and technical liaison responsibilities to help safeguard information assets. You will research and evaluate security and privacy issues, translate findings into actionable policies and awareness materials, support risk and compliance activities, and partner with business units, IT, and vendors to streamline processes and implement enhancements. MaineIT is seeking a highly talented individual who will represent our C.A.R.E. values in all that they do. At MaineIT, we: Practice Customer-focus, ensuring that our customers are heard, and their needs are met. Hold ourselves to a high level of Accountability by being transparent with our stakeholders. Maintain an effective level of Responsiveness by providing timely updates in a proactive manner. Strive to provide Empathy-driven, people-focused services by applying emotional intelligence skills and behaviors. HYBRID WORK OPPORTUNITY: This position has the potential to work from home as much as 90% of the time with management approval. WHY THIS ROLE STANDS OUT: In today’s information security landscape, you have countless career paths to choose from. Here’s why this opportunity is different: Broad Security Impact: Influence strategy and execution across security awareness and training, policy, risk, compliance, and reporting. Ownership of Awareness Programs: Lead phishing tests, training campaigns, and platform administration. Business-Tech Connector: Translate technical concepts into clear language and improve workflows. Efficiency Driver: Use process improvement and automation tools to streamline operations. Collaborative Problem Solver: Coordinate projects and work with vendors and IT to resolve issues. WHY YOU'LL LOVE WORKING AT MAINEIT: If you’re seeking a culture that supports growth, fosters success, and values protecting the confidentiality, integrity, and availability of State of Maine data and systems, then MaineIT is where you belong. With the MaineIT Information Security Office, you can expect: Generous Telework Opportunities: This position has the opportunity to work up to 90% remotely. Meaningful & Impactful Work: Play a vital role in protecting Maine’s digital infrastructure. Supportive Team: Join a collaborative, professional environment that invests in your development. Work-Life Balance: Flexible scheduling and a healthy balance of professional and personal time. Innovative Culture: Be part of a team that values innovation and continuous improvement.

Requirements

Eight (8) years of education, training, and/or experience analyzing, evaluating, and/or developing improvements to organizational and/or managerial systems, programs, and practices.

Nice To Haves

Information Security Expertise: proven experience in governance, risk management, compliance activities, and applying industry frameworks such as NIST, CIS, and HIPAA
Security Awareness & Training Program Management: Skilled in administering platforms like KnowBe4/PhishER, including campaign design, configuration, reporting, and actionable insights
Technical Troubleshooting: Strong ability to diagnose application issues, collaborate with vendors and IT teams for resolution, and document root causes with preventive workflows
Process Improvement & Automation: Familiarity with agile methodologies, and tools such as Power Automate and low-code platforms to streamline workflows
Communication & Documentation: Exceptional written and verbal skills for translating technical concepts into clear language; experienced in preparing reports, briefing memos, and training materials
Broad IT Knowledge: Working understanding of web applications, networking, email flow, and related technologies beyond Information Security.

Responsibilities

Research and Reporting: Analyze security and privacy issues, document findings, and prepare reports, presentations, and actionable recommendations.
Policy & Compliance: Develop, implement, and maintain security policies and procedures aligned with NIST, HIPAA, and other frameworks; support audits and compliance documentation.
Risk Management: Assist with risk and vulnerability assessments, create migration plans, monitor progress, and report on overall security posture.
Security Awareness & Training: Design and deliver awareness programs (training campaigns, phishing tests) and manage the security awareness platform (e.g., KnowBe4, Cybrary).
Process & System Improvement: Apply systems analysis to optimize workflows, gather requirements, troubleshoot vendor-supported applications, and advocate for automation/configuration enhancements.
Project Coordination & Metrics: Coordinate cross-functional initiatives, track action items, and ensure smooth implementation of security programs. Maintain accurate inventories of training and phishing data and performance metrics.

Benefits

Work-Life Balance – Rest is essential. Take time for yourself using 13 paid holidays, 12 days of sick leave, and 3+ weeks of vacation leave annually. Vacation leave accrual increases with years of service, and overtime-exempt employees receive personal leave.
Health Insurance Coverage – The State of Maine pays 85%-100% of employee-only premiums ($11,857.68-$13,950.24 annual value), depending on salary.
Health Insurance Premium Credit – Participation decreases employee-only premiums by 5%.
Dental Insurance – The State of Maine pays 100% of employee-only dental premiums ($365.28 annual value).
Retirement Plan – The State of Maine contributes 14.11% of pay to the Maine Public Employees Retirement System (MainePERS), on behalf of the employee.
Gym Membership Reimbursement – Improve overall health with regular exercise and receive up to $40 per month to offset this expense.
Health and Dependent Care Flexible Spending Accounts – Set aside money pre-tax to help pay for out-of-pocket health care expenses and/or daycare expenses.
Public Service Student Loan Forgiveness – The State of Maine is a qualified employer for this federal program.
Living Resources Program – Navigate challenging work and life situations with our employee assistance program.
Parental leave is one of the most important benefits for any working parent. All employees who are welcoming a child—including fathers and adoptive parents—receive forty-two (42) consecutive calendar days of fully paid parental leave. Additional, unpaid leave may also be available, under the Family and Medical Leave Act.
Voluntary Deferred Compensation – Save additional pre-tax funds for retirement in a MaineSaves 457(b) account through payroll deductions.
State employees are eligible for an extensive and highly competitive benefits package, covering many aspects of wellness.