Information Security Analyst
About Our Office
The Office of the Tennessee Comptroller of the Treasury is responsible for the audit of state and local governmental entities and participates in the general financial and administrative management and oversight of state government. The Office is led by Comptroller Justin P. Wilson, a constitutional officer who is elected by the Tennessee General Assembly.
In the Comptroller’s Office, we strive to deliver on our mission to make government work better. We believe our success as an office depends on finding opportunities for employees to accomplish our office’s goals and answer challenges to make things better.
We want every member of our team to be excited to come to work every day and be challenged. Through dedicated hard work and commitment, every Comptroller’s Office employee accepts personal responsibility to accomplish our mission and uphold it.
Position
The Comptroller's Division of Technology Solutions (TS) provides technology services and support to the Office's Divisions and Boards. Technology Solutions ensures its services align with the Office's specific business needs.
We are looking for an Information Security Analyst who will be responsible for assisting with information security efforts regarding information security risk assessments and mitigation, information security policy promulgation and compliance, and security awareness training.
Major responsibilities will include:
- Identifying and analyzing areas of potential security risk to access or system breach
- Determining triage, escalation, and communication for security events
- Investigating and resolving security breaches
- Creating and implementing security standards, policies, and procedures
- Monitoring systems to ensure current updates and patch levels are applied
- Defining requirements for firewall access controls to prevent unauthorized access, disclosure, and maintain data integrity
- Encrypting data transmission to conceal confidential information as it is being transmitted
- Developing and reviewing specifications for design, construction, or implementation of security in systems
- Using and training others on use of forensic science techniques
Education and Experience
To qualify for consideration, an applicant should have graduated from an accredited college or university with a bachelor’s degree and at least five years of information security experience. Other combinations of education/experience, if evaluated as equivalent, may qualify an applicant for consideration.
To perform this job successfully, the candidate should possess the ability to plan, direct, and evaluate the security program for an agency. The candidate should also possess the skills necessary to direct and lead security policy promulgation, risk analysis, safeguard and compliance efforts and incident response.