Senior Cyber Compliance Specialist (Information Systems Specialist 8) Hybrid Work Options (Permanent Full-Time Position)

State of Oregon • Salem, OR

13d • $7,807 - $11,823 • Hybrid

About The Position

The Senior Cyber Compliance Specialist is a key contributor to the Oregon Health Authority and Oregon Department of Human Services IT security program. The role manages and secures desktops, laptops, servers, virtual and on-premises platforms, and mobile devices, combining technical expertise and customer service to protect agency information assets while meeting security requirements and supporting business operations.

The specialist develops, implements, and maintains security solutions aligned with state and federal requirements, Center for Internet Security (CIS) and National Institute of Standards and Technology (NIST) frameworks, agency policies, and business needs. The position responds to security events and incidents, investigates threats, identifies affected assets, and coordinates containment, remediation, and eradication. It also supports vulnerability management, continuous security monitoring, policy compliance, documentation, reporting, and collaboration with security teams and agency departments.

The role is a permanent, full-time, classified position based in Salem, Oregon, with hybrid work available. Appointment is contingent on required background checks and CJIS clearance, training, and testing.

Requirements

• Meet one of the following experience and education combinations: seven years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management; an associate degree or higher or a two-year accredited vocational IT training program plus five years of that experience; a bachelor's degree in computer science, information technology, or a related field plus three years of that experience; or a master's degree in information technology, computer science, or a related field plus one year of that experience.
• Be eligible to pass an FBI CJIS and Oregon State Police fingerprint-based criminal background check for access to criminal justice information.
• Pass CJIS training and testing.
• Pass OHA background checks, including a fingerprint-based national background check and an abuse/neglect check.
• Submit a resume, cover letter, completed Workday application, and answers to all supplemental questions.
• Complete I-9 documentation and confirm authorization to work in the United States within three days of hire; visa sponsorship is not provided.

Nice To Haves

• Complete CISSP or CISM certification, or be willing to obtain one within 12 months of hire.
• Experience using management strategies and techniques to lead information security technical and program professionals.
• Experience working with federal, state, and agency regulations and guidelines concerning information security and protection of individually identified information from unauthorized disclosure.
• Experience with data governance and managing regulated data.
• Ability to explain technical issues and concepts to non-technical audiences.
• Knowledge of ODHS and OHA programs and related government programs.
• Excellent written and verbal communication and presentation skills.
• Experience working with diverse groups with varying priorities and goals and helping them reach consensus.
• Professional experience assessing and implementing security controls aligned with NIST and CIS controls.
• Strong understanding of regulated data frameworks such as HIPAA, OCIPA, and ISO 27001.

Responsibilities

• Develop, implement, and maintain security solutions aligned with state and federal requirements, CIS and NIST frameworks, and agency needs.
• Manage and secure agency IT assets, including desktops, laptops, servers, virtual and on-premises platforms, and mobile devices.
• Investigate security events, incidents, and breaches; identify compromised assets; and take remedial action to contain and eradicate threats.
• Help identify and remediate vulnerabilities, and ensure software and hardware are updated with current security patches and firmware.
• Advise on information protection and IT security policies and enforce applicable requirements.
• Ensure continuous monitoring strategies are in place for systems and platforms, and coordinate with the EIS Cyber Security Services Security Operations Center.
• Respond to security alerts, investigate suspicious activity and potential incidents, and escalate as necessary to contain and isolate affected assets and eradicate threats.
• Maintain accurate records of security events, incidents, vulnerabilities, and remediation efforts, and generate compliance and management reports.
• Collaborate with IT security professionals, OIS subject matter experts, teams, and agency departments on security policies and initiatives.
• Seek improvements to IT security and customer service processes and stay current on security threats and technologies.

Benefits

• Low-cost medical, vision, and dental coverage for employees and their families.
• Optional life insurance, disability coverage, deferred compensation, and health and childcare flexible spending account options.
• Paid time off including 11 holidays, 3 personal days, monthly sick leave, and vacation accrual starting at 8 hours per month.
• Potential eligibility for the Public Service Loan Forgiveness Program.
• Retirement through the Public Employees Retirement System (PERS) or Oregon Public Service Retirement Plan (OPSRP).
• Training and development opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed