Offer summary

Qualifications:

8 years of experience in information security architecture and cybersecurity., Proficiency in security assessment techniques and vulnerability scanning tools., Excellent communication skills for collaboration with cross-functional teams., Knowledge of regulatory compliance requirements related to data security and privacy..

Key responsabilities:

Deploy the ChAMP project and retire the mainframe system.

Collaborate with teams to securely migrate mainframe data to cloud RDS.

Conduct security assessments and recommend remediation strategies.

Participate in security incident response activities and analyze incidents.

Job description

POSITION: Data Security Analyst
DURATION: Long term
Remote – Should Be local to TX

The Office of the Attorney General's (OAG) IT Enterprise Information Security team is seeking a skilled Data Security Analyst to join the Security Architecture Management Team. As a Security Analyst, you will play a crucial role in assessing and enhancing the security architecture of OAG's IT systems and infrastructure. You will collaborate with cross-functional teams to identify vulnerabilities, design secure solutions, and contribute to the ongoing improvement of the organization's security posture. You will work to deploy major IT projects, ensure security implications are addressed appropriately, and assist in the retirement of the OAG's mainframe system.

Responsibilities may include, but are not limited to:

Work to successfully deploy the Children Are My Priority (ChAMP) project and retire the mainframe system currently used by the Office of the Attorney General.
Work successfully with multiple teams to securely migrate mainframe data to a cloud RDS.
Collaborate with the Security Architecture Management Team to analyze, design, and implement security solutions that align with the agency's security policies and industry best practices.
Conduct security assessments, penetration testing, and risk analysis to identify vulnerabilities and recommend remediation strategies.
Provide expertise in evaluating and recommending security technologies, tools, and practices to enhance the organization's security architecture.
Develop and maintain security standards, guidelines, and documentation for OAG's IT systems and projects.
Participate in security incident response activities, including analyzing incidents, providing recommendations, and contributing to incident resolution.
Collaborate with IT teams to review and assess the security implications of proposed system changes, new technologies, and software updates

II. CANDIDATE SKILLS AND QUALIFICATIONS

Minimum Requirements: Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.
Years	Required/Preferred	Experience
8	Required	Experience in information security architecture, cybersecurity, government regulations, Cloud security compliance, and risk assessments
8	Required	Experience in security architecture
8	Required	Proficiency in security assessment techniques, vulnerability scanning tools, and penetration testing methodologies
8	Required	Experience with security technologies such as firewalls, intrusion detection/prevention systems, SIEM, and endpoint security solutions
8	Required	Experience in database migration strategies, including schema conversion, data migration, and application reconfiguration.
8	Required	Experience with securing both mainframe and cloud-based systems, particularly in migration scenarios.
8	Required	Excellent communication skills to effectively collaborate with cross-functional teams and communicate security recommendations to technical and non-technical stakeholders
8	Required	Analytical mindset and problem-solving skills to identify security gaps and recommend effective solutions
8	Required	Knowledge of regulatory compliance requirements related to data security and privacy (e.g., GDPR, HIPAA) is a plus
8	Required	Familiarity with cloud security principles and solutions (e.g., AWS, Azure)
8	Required	Understanding of RDS (Relational Database Service) on AWS, including security, backup, scaling, and high availability features.
1	Required	Certified AWS CCP/SCS, CISM, and CISA
1	Preferred	Experience in AWS Cloud security and IT Governance Risks & Compliance GRC advisory services, control framework, ISPRB/IRM, data types/classification, policy violations, security exceptions
1	Preferred	Experience with Sensitive Data handling (SDHA), data privacy and governance SPI/PII/ePHI, HIPAA Varonis data classification, JIRA/SNOW, Internal/External Audits
1	Preferred	Familiarity with IBM z/OS and its associated components, including CICS, Adabas, DB2, and JCL.
1	Preferred	Knowledge of mainframe security models and how they integrate with applications and data.