Principal Information Security Analyst (Information Systems Analyst, Principal - Generalist)

City of Portland•1120 SW 5th Ave, OR

1d•Remote

About The Position

The City of Portland’s Bureau of Technology Services (BTS) is hiring two Principal Information Security Analysts to strengthen cybersecurity, reduce risk, and support reliable delivery of essential City services. The positions provide senior technical leadership across information technology (IT) and operational technology (OT), including industrial control systems and supervisory control and data acquisition (ICS-SCADA) environments. The analysts translate complex security and compliance requirements into practical solutions that protect City information, support operational continuity, and improve cybersecurity maturity. One position supports the Public Safety Service Area, including the Bureau of Emergency Communications, Portland Bureau of Emergency Management, Portland Fire & Rescue, and Portland Police Bureau. The other supports the Public Works Service Area, including the Bureau of Environmental Services, Portland Parks & Recreation, Portland Bureau of Transportation, and Portland Water Bureau. Assignments may emphasize enterprise security architecture and engineering or OT cybersecurity and critical infrastructure resilience, depending on program priorities and candidate strengths. Both positions report to the Chief Information Security Officer (CISO) and work in a matrix reporting structure with senior managers in their respective service areas. The positions work primarily remotely, but onsite attendance is required when operational needs or cybersecurity incidents require it. Remote work must be performed within Oregon or Washington. The regular schedule is Monday through Friday, 8:00 a.m. to 5:00 p.m.; alternate schedules may be available. These are full-time, regular appointments represented by PROTEC17. Candidates must demonstrate the specified qualifications in their cover letter and resume through examples of their work, individual role, tools or methodologies used, and results. Selected candidates must pass a comprehensive background investigation, possess a valid Oregon or Washington driver’s license, and be able to travel to City facilities when needed.

Requirements

Experience providing senior technical leadership in cybersecurity architecture, risk management, and compliance across complex enterprise technology environments, supported by relevant formal training, industry-recognized certifications, or equivalent professional experience.
Experience with cybersecurity frameworks and standards, including the NIST Cybersecurity Framework and relevant NIST Special Publications, and applying them to security assessments, control design, and cybersecurity improvement planning.
Experience in enterprise security practices across networks, systems, applications, cloud platforms, operating systems, and virtualization, including identity and access management, zero trust principles, security hardening, and configuration management.
Experience evaluating or improving cybersecurity operations using practices or tools such as SIEM, EDR, intrusion detection and prevention, firewalls, vulnerability management, and penetration testing.
Experience interpreting and supporting applicable regulatory requirements and cloud security controls, documenting compliance, assessing control gaps, and recommending remediation priorities.
Experience analyzing complex cybersecurity issues, developing clear technical documentation and actionable recommendations, and communicating effectively with technical teams, leadership, and nontechnical partners.
Selected candidates must pass a comprehensive background investigation.
A valid Oregon or Washington driver’s license and ability to travel to City facilities when needed are required.
Applicants must address each minimum qualification in their cover letter and resume with specific examples, including their individual role, tools or methodologies, and results.

Nice To Haves

Experience with OT, ICS, SCADA, and distributed control systems, including OT network architecture, segmentation, and the Purdue Model.
Experience applying OT cybersecurity guidance such as NIST SP 800-82 or ISA/IEC 62443 while addressing safety, availability, legacy systems, and operational continuity.
Experience with industrial protocols such as Modbus, DNP3, and OCP and their cybersecurity considerations.
Experience implementing OT monitoring, anomaly detection, secure remote access, vendor access controls, or incident response processes.
Experience supporting architecture review boards, enterprise risk management, governance, risk, and compliance tools, or cybersecurity maturity programs.
Experience in government, utilities, healthcare, or other regulated or critical infrastructure environments.
Experience developing cybersecurity strategies, architecture roadmaps, maturity models, or measurable improvement plans.
Relevant cybersecurity certifications such as CISSP, CISM, CISA, GIAC, CCSK, or comparable credentials.
FEMA Incident Command System and National Incident Management System (ICS/NIMS) training.
Experience with OT/ICS-SCADA, NIST SP 800-82, or ISA/IEC 62443 is valuable.

Responsibilities

Assess cybersecurity capabilities, identify security gaps, and develop measurable improvement plans across City IT and OT environments.
Advise technology teams and leadership on secure system design, cloud security, identity and access management, data protection, network security, and zero trust principles.
Develop and improve technical baselines, secure configurations, monitoring, alerting, vulnerability management, and operating procedures.
Partner with operational teams to address OT and ICS-SCADA risks, including network segmentation, secure remote access, vendor connectivity, monitoring, and recovery readiness.
Conduct or support threat modeling, risk assessments, control reviews, vulnerability assessments, penetration testing, and audits; recommend practical remediation and investment priorities.
Align cybersecurity practices with City policies, applicable regulatory requirements, and recognized frameworks; prepare documentation and evidence for audits and compliance reviews.
Participate in architecture reviews and incorporate cybersecurity requirements into technology planning, procurement, implementation, and service operations.
Assist with investigation, containment, and recovery during cybersecurity incidents, and identify improvements afterward.
Document technical findings, risks, recommendations, and decisions; communicate them to diverse audiences and support training and knowledge sharing across teams.
Work collaboratively across technical teams, bureau leadership, operational staff, vendors, and external partners to support cybersecurity decisions and improvements.