Security Risk Analyst - Austin, United States - Texcelvision

    Default job background
    Description

    Job Description

    Job Description

    Respond by: 05/13/24

    Rate: DOE

    Type: Contract

    Please respond with resume and 3 references preferably supervisor (name, title, company, email, phone number)

    Preference will be given to candidates who meet all preferred skills and have public sector experience

    Background Check will be performed if a candidate is selected for placement and will have to be passed'

    Work Mode:Must work on-site from primary work location a minimum of 2 days per week.

    Job Description:

    The Department requires the services of (1) Security Administrator- Specialist hereafter referred to as Worker, who meets the general qualification of Security Administrator Specialist and the specifications outlined in this document for Department.

    • Conduct Supply Chain Risk (third party hosted applications) Assessment
      • This includes all 3rd party hosted risks that are business critical.
    • Create Annual Checklist for Compliance Efforts such as for CJIS, PCI, TXRAMP, etc.
    • Develop/Maintain Management Plans - Risk, Patch, Access, Vulnerability, etc.
    • Develop Dashboards as a Communication Tool
      • Internal for Cybersecurity Team and IT
      • External for Divisional Awareness

    II. CANDIDATE SKILLS AND QUALIFICATIONS

    Minimum Requirements:
    Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.

    Years

    Required/Preferred

    Experience

    5

    Required

    Developing and revising policies, standards, processes, and guidelines.

    5

    Required

    Managing risks related to the use of Information Technology, Information Security, Privacy, Regulatory Compliance and Governance.

    5

    Required

    Conducting gap analysis and implementing frameworks and standards such as NIST

    5

    Required

    Conducting vendor risk assessments against organizational security requirement

    5

    Required

    Experience with computers, networks, firewalls, switches, encryption, and authentication methods.

    3

    Required

    Experience writing technical documentation for IT solutions, including operational guides and compliance documentation

    2

    Required

    Experience in Data analysis and report creation in Excel, PowerPoint, and Power BI Desktop

    III. TERMS OF SERVICE

    Services are expected to start 05/20/2024 and are expected to complete by 11/30/2024. Total estimated hours per Candidate shall not exceed 1040 hours. This service may be amended, renewed, and/or extended providing both parties agree to do so in writing.