Information Security Analyst

Work for Indiana

Begin a fulfilling career with the State of Indiana by joining one of the largest employers in the state, offering a range of opportunities across 60+ agencies. At the state, you'll find competitive compensation, a robust benefits package and a commitment to work-life balance. Most importantly, you'll have the chance to make a real and measurable impact on the lives of Hoosiers across Indiana.

About Indiana Department of Environmental Management (IDEM):

Our mission is to implement federal and state regulations to protect human health and the environment while allowing the environmentally sound operations of industrial, agricultural, commercial, and governmental activities vital to a prosperous economy. We issue air, water, and solid and hazardous waste permits that restrict discharges to environmentally safe levels. Staff members inspect and monitor regulated entities; provide compliance and technical assistance; monitor and assess air, land, and water quality; use enforcement actions as necessary to ensure compliance; and respond to incidents involving spills to soil or waters of the state.

Role Overview:

Top skills for this position:

• Risk identification/threat detection, and management.
• Technical expertise in data classification, quality, sharing, and policy.
• Conducting risk assessments, maintaining security policies and procedures.

Key projects, programs and tasks the role is responsible for include:

• Safeguarding IDEM's information assets: Protecting the confidentiality, integrity, and availability of environmental data and technology systems.
• Vulnerability and risk assessments: Conducting mandatory vulnerability assessments, risk analyses, and audits to detect and mitigate threats before they impact operations.
• Designing and implementing controls: Creating technical and procedural controls, including threshold-based alerts, dashboards, and compliance documentation.
• Incident response: Leading or supporting investigation, containment, eradication, and recovery activities during security incidents; producing incident reports, root cause analyses, and remediation plans. May require weekend work.
• Monitoring security telemetry: Continuously monitoring endpoints, networks, cloud services, and vendor systems for health signals, threats, and vulnerabilities.

A Day in the Life:

The essential functions of this role are as follows:

• Assists in developing plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Monitors current reports of computer viruses to determine when to update virus protection systems.
• Assists with data transmissions and helps build firewalls to conceal confidential information as it is being transmitted and to keep out corrupt digital transfers.
• Performs risk assessments and executes tests of data processing systems to ensure functioning of data processing activities and security measures.
• Assists with modifying computer security files to incorporate new software, correct errors, or change individual access status.
• Supports violations of computer security procedures and discusses procedures with violators to ensure violations are not repeated.
• Documents computer security and emergency measures policies, procedures, and tests.
• Consults with users to discuss issues such as computer data access needs, security violations, and programming changes.
• Monitors use of data files and regulate access to safeguard information in computer files.
• Coordinates implementation of computer system plan with establishment personnel and outside vendors.
• Trains users and promotes security awareness to ensure system security and to improve server and network efficiency.

The job profile is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Other duties, responsibilities and activities may change or be assigned at any time with or without notice.

This position is exempt from overtime compensation for additional work hours which may be required to complete essential functions or other assigned work. Exempt employees may work more than 75 hours in a pay period without additional compensation and must report a minimum of 75 hours per pay period of work hours and/or paid leave taken to receive their base biweekly salary.

What You'll Need for Success:

Individuals in this role should minimally be able to articulate or demonstrate the following:

• Strong knowledge of a broad array of security software applications and tools.
• Strong understanding of computer-related security systems including firewalls and encryption.
• Strong knowledge of state and federal legislation and regulatory laws pertaining to information system security and privacy.
• Strong technical writing and research skills
• Strong problem-solving and analytical skills.
• Excellent verbal and written communication skills.
• Self-motivated with the ability to prioritize, meet deadlines, and manage changing priorities.
• Ability to understand and apply complex computer logic to duties being performed.
• Ability to identify and mitigate network vulnerabilities.
• Ability to work autonomously and handle multiple assignments.

A degree is not required. However, at least 5+ years of experience applying the outlined knowledge, skills, and abilities in a similar role may be considered.

Individuals should have the ability to perform essential functions with or without reasonable accommodation.

Supervisory Responsibilities/Direct Reports:

This role may be utilized in a supervisory capacity based on agency needs.

Benefits of Employment with the State of Indiana:

The State of Indiana offers a comprehensive benefit package for full-time employees which includes:

• Three (3) medical plan options (including RX coverage) as well as vision and dental plans
• Wellness Reward