Under general supervision, supports the management, implementation, review, and improvement of network, hardware, application, and data security practices.
Actively analyzes the agency threat surface and makes recommendations to harden agency systems. Analyzes agency processes and implements and/or makes recommendations to enhance security. Reviews information received concerning potential security incidents from end users, supervisory personnel, other federal, state, county and local agencies and governmental entities involved in the exchange of data with the State Board of Elections (SBE), external entities such as the Multi-State Information Sharing and Analysis Center (MS-ISAC), law enforcement agencies, and public information sources.
Participates in cybersecurity-focused organizations. Monitors on-line information security related websites, blogs, articles, reports as well as other security intelligence sources to keep up-to-date on the latest threats and trends. Implements and documents compliance with the "CIS Controls" published by the Center for Internet Security.
Coordinates with Cybersecurity Information Sharing Program Manager and other Cybersecurity Program stakeholders to mature the State's Cyber Navigator program. Assists with training programs for SBE staff and recommends cybersecurity best practices.
Implements, supports and monitors the agency's information security applications, including email security, web security, client security software, firewalls, intrusion prevention applications, data loss prevention, etc. Monitors system dashboards and logs for threat indicators. Analyzes data and performs necessary incident response procedures. Conducts network, system and application vulnerability assessments.
Continues education by attending training sessions, seminars, and conferences to increase familiarity with and maintain current knowledge of security products, vendors, techniques, and procedures.
Consults with SBE staff on election-related security issues. Represents the agency at the state and national level for election-related security matters.
7. Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.