Systems Security Analyst #00255

Title: Systems Security Analyst #00255 State Role Title: Info Security Analyst II Hiring Range: $77,000.00 -$93,000.00 Pay Band: 5 Agency: The Library of Virginia Location: The Library of Virginia Agency Website: https://www.lva.virginia.gov/ Recruitment Type: General Public - G Job Duties The Library of Virginia seeks a versatile and motivated Systems Security Analyst to support the operational, technical, governance, and compliance activities necessary to protect the agency’s information systems, networks, applications, cloud environments, and data assets. The ideal candidate will possess strong analytical, organizational, problem-solving, and communications skills. They will have strong troubleshooting skills, the ability and desire to learn new technologies quickly, and experience working in partnership with technical and non-technical staff. This newly created role will review, update and administer our security monitoring and incident tracking procedures. The incumbent of this position will also manage and examine system security logs proactively, timely, and provide effective responses to potential issues and collaboratively work to transform data security practices at a 200-year-old cultural heritage organization and state agency with an eye towards the future. Specifically, the Systems Security Analyst will be responsible for performing duties such as, but not limited to providing security design guidance for agency projects; assisting with conducting disaster recovery and business continuity planning and cybersecurity training; creating departmental efficiencies; improving security information gathering and response; coordinating remediation activities and validating corrective actions; and elevating governance, risk assessment and compliance procedures concerning Information system security. This position will serve as backup to the Information Security Officer during absences or delegated assignments. Minimum Qualifications

• Experience demonstrating broad knowledge of cybersecurity principles, frameworks and best practices, including state and federal standards.
• A work history demonstrating experience in vulnerability management, incident response, audit coordination, and risk management methodologies.
• Experience conducting risk assessments and security control evaluations.
• Experience monitoring and assessing security alerts, incidents, vulnerability scans, security logs, and threat intelligence.
• Experience developing and maintaining IT security policies, standards, procedures, metrics, and supporting documentation.
• Experience demonstrating the ability to orally communicate technical concepts and conduct security awareness and role-based cybersecurity training with non-technical audiences.
• Experience coordinating internal and external audit responses and remediation tracking.
• Experience coordinating remediation activities with system administrators, developers, vendors, business stakeholders, and validating corrective actions and tracking remediation activities to closure.
• Experience supporting endpoint, network, identity, application, and cloud security controls.
• Experience demonstrating knowledge of and familiarity with artificial intelligence, governance and emerging technology risk.
• Experience demonstrating the ability to manage multiple priorities and work independently as well as collaboratively as part of a team. Additional Considerations
• Course work in cybersecurity, information systems, computer science, or related field desired.
• Professional certifications such as Security+, CISSP, CISM, CRISC, GISP, GCCC, or similar credentials desired.
• Experience providing support and compliance with Commonwealth security standards, policies, and procedures including SEC530.
• Knowledge of security standards such as NIST Cybersecurity Framework, NIST SP 800-53, and CIS Controls desired.
• Considerable experience supporting audit remediation, information security, risk, compliance, and enterprise cybersecurity initiatives desired.
• Considerable experience developing and delivering security awareness and role-based cybersecurity training.
• Experience with Microsoft 365, Azure, and cloud security technologies desired . Special Instructions You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to “Your Application” in your account to check the status of your application for this position. State employees who have been affected by Policy 1.3 Layoff and possess a valid Interagency Placement Screening Form (Yellow Card) or a Preferential Hiring Form (Blue Card) must submit the card BEFORE the closing date for this position. The card may be scanned and attached to the application or faxed to (804) 371-7401. Please include your name and the position number of the fax cover sheet. Reasonable accommodations are available to individuals with disabilities during the application and/or interview processes per the Americans with Disabilities Act. Please call 804-225-2131 for assistance. State applications will only be accepted as submitted online by 11:55 pm on the closing date through the Recruitment Management System (RMS). Applications submitted via email, postal mail, fax, or in person will not be considered. Applicants are expected to fully represent qualifications and work history on the State applications and or in resumes. The decision to interview an applicant is based on the information provided in the application, resume, or other relevant documents provided; therefore, it is essential for applicants to supply detailed information. Submitting an incomplete state application/resume, or a state application/resume lacking in detail, may impact your interview eligibility. This website will provide confirmation of receipt when the application is submitted successfully. Please refer to “Your Application” in your RMS Account to check the status of your application for this position. All applicants are subject to a background investigation. The investigation may include: fingerprint checks (State Police, FBI); local agency checks; employment verification; verification of education (relevant to employment); credit checks; and other checks requested by the hiring authority. Equal Opportunity Employer Contact Information Name: Debbie Howe Phone: (804) 292-6497 Email: [email protected] In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019. Note : Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.