Information Security Analyst (Ista Iii - Generalist)

Job Appointment:Regular, full-time
Work Schedule: Monday - Friday, 8 am-5 pm with occasional after-hours work required as needed for critical security incidents or urgent system maintenance.
Work Location: This position has an exception to work primarily remotely. However, there will be instances when it is necessary to come onsite for work (with as much advance notice as possible). Remote work must be performed within Oregon or Washington. For more information, click here.
Benefits:Please check our benefit tab for an overview of benefits for this position.
Union Representation:This position is represented by Professional Technical Employees, Local 17 (PROTEC17). To view this labor agreement, please click here.
Application Material:Please click APPLY to submit your application via the City of Portland's online portal. You will need to attach a cover letter and resume.
Position Summary

The Bureau of Technology Services (BTS) is seeking to fill the position of Information Systems Analyst (ISTA III) to work on the Information Security team.

The Information Security Analyst will be responsible for assisting the Information Security team and Architects by monitoring, analyzing, maintaining, and documenting assigned security technologies, and providing City cybersecurity compliance support services.

As an Information Security Analyst, you will:

• Develop and maintain technology access and audit controls, cybersecurity standards, and processes.
• Monitor and respond to alerts across cybersecurity systems.
• Contribute to cybersecurity best practices in support of the City's Information Security architecture and compliance programs.

The Team:
The role of the Information Security team is to ensure the confidentiality, integrity, and availability of all City data and communications systems and assets. The responsibilities of this program are to develop and measure compliance with information policies and procedures; to minimize risk through implementation of effective technical, administrative, and physical security controls; and to develop and maintain the BTS business continuity and disaster recovery plan.
Information Security supports the city goal to deliver efficient, effective, and accountable municipal services as well as the OMF goal to maximize the cost-effective use of technology by employing appropriate safeguards required to properly protect the City's information assets.
Performance is measured by the effectiveness of the Information Security program in protecting the City's technology environment from cybersecurity threats.
The following minimum qualifications are required for this position:

1. Experience with information technology security, such as GIAC, CISA, or Certificate of Cloud Security Knowledge (CCSK), with the possibility of substituting demonstrated skills and validated work experience for certifications, subject to a professional development plan for certification in Information Security within one year of hire as a condition of continued employment.
2. Applied knowledge and experience supporting information technology systems, applications, and services, including independently performing basic system analysis and troubleshooting, and utilizing advanced customer service skills to effectively communicate with customers.
3. Applied knowledge and experience with the National Institute of Standards and Technology Cybersecurity Framework (NIST-CSF) and NIST special publications of cybersecurity standards and best practices.
4. Applied knowledge and experience with one or more of the following security capabilities: identity management and access control (IAM), endpoint protection and response (EDR), data security posture management (DSPM), or security information and event management (SIEM) systems, vulnerability management tools, penetration testing tools or web application firewalls.
5. Applied knowledge and experience using one or more operating systems such as Windows, Unix/Linux, VMWare ESX, or Microsoft Hyper-V.
6. Applied knowledge and experience with implementing security hardening procedures and standards, such as the Center for Internet Security (CIS) Security benchmarks and tools such as Microsoft Windows Group Policy.

Applicants must also possess:

• Ability to successfully pass an in-depth background investigation.
• Ability to work non-business hours during cybersecurity incident responses.

• Resume
• Cover Letter
• Answer to three (3) Supplemental Questions (click on the Questions tab to preview the questions)

• Veteran documents to request for Veteran Preference (ex, DD214-Member 4, VA Benefit Letter, etc.)

Application Tips:

• The City of Portland has How to Apply Videos and offers How to Apply Classes once per month. If you have questions after watching the videos you are invited to contact the recruiter listed on the announcement.
• Your cover letter should include details describing your education, training, and/or experience, and where obtained, which clearly reflects your qualifications for each of the numbered items in the "To Qualify" section of this announcement.
• Your resume should support the details described in your cover letter.
• Salary Range/Equity Pay Analysis: Please note per the Oregon State Pay Equity Law your salary is determined based on the experience and education listed in your resume/application. It is strongly encouraged to include any transferable experience (paid or unpaid regardless of how recent) to ensure your offer is reflective of all directly related and equivalent experience.
• Do not attach materials not requested.
• All completed applications for this position must be submitted no later than the closing date and time of this recruitment.
• All applications must be submitted via the City's online application process. E-mailed and/or faxed applications will not be accepted.

• An evaluation of each applicant's training and paid and unpaid experience, as demonstrated in their resume and cover letter, weighted 100%.
• Your resume and cover letter will be the basis for our evaluation of your qualifications for this position. Incomplete or inappropriate information may result in disqualification.
• You have 14 days from the notice of the minimum qualification evaluation results to let us know if you like to review and discuss your evaluation result. Please read the City of Portland Administrative Rule 3.01 for complete information.
• Additional evaluation may be required before the establishment of the eligible list and/or final selection.

• Candidates who meet the minimum qualifications will be placed on the equally ranked eligible list.

• The hiring bureau will review and select candidates to interview.
• Please note, the selection process may take up to 90 days from the notification of being placed on the eligible list.

• A start date will be determined after all conditions of employment have been met.

Click here for additional information regarding the following:

• Veteran Preference
• ADA, Pregnancy, and Religious Accommodations
• Work Status
• Equal Employment Opportunity
  

Employment Type: Regular