Posting Details
THIS POSITION REPORTS TO THE SANTA FE OFFICE AND IS NOT ELIGIBLE FOR TELEWORK.
THIS POSTING WILL BE USED FOR ONGOING RECRUITMENT AND MAY CLOSE AT ANY TIME. APPLICANT LISTS MAY BE SCREENED MORE THAN ONCE.
Why does the job exist?
The Senior IT Security Analyst is responsible for working with the CIO, Deputy CIO, ERB management, security audit partners, and vendor technical teams to ensure the New Mexico Education Retirement Board (ERB), is in compliance with all information security requirements.
How does it get done?
The incumbent will lead the agency's information security program across a hybrid enterprise environment, protecting the pension administration system that serves New Mexico educators. Key responsibilities include: securing AWS cloud infrastructure, hosted services, and VDI environment; overseeing Fortinet physical and virtual firewall administration, network segmentation, and secure wireless infrastructure; managing Web Application Firewall (WAF) configurations and web application security for hosted systems, including the pension administration platform; leading vulnerability management, threat mitigation, and remediation across cloud, Windows and Linux servers, virtual machines, and endpoints; monitoring security events through Endpoint Detection and Response (EDR) tools and coordinating incident detection, triage, containment, and response; conducting security audits, risk assessments, and compliance reviews; developing and maintaining IT security policies, standards, procedures, and the Computer Security Incident Response Plan (CSIRP); coordinating with the CIO, Deputy CIO, ERB management, security audit partners, and vendor technical teams to ensure compliance with information security requirements; and contributing to disaster recovery, business continuity, and security awareness initiatives.
Who are the customers?
The CIO, the IT department, and the agency as a whole.
Ideal Candidate
The CIO, the IT department, and the agency as a whole.
Minimum Qualification
Bachelor's degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and three (3) years of experience in IT security or compliance validation (e.g., HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling seven (7) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g., CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g., PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience.
Employment Requirements
Must possess and maintain a valid New Mexico Driver's License. Must possess and maintain a current Defensive Driving Certificate from the State of New Mexico or must pass and receive Defensive Driving Course Certification as a condition of continued employment. Pre-employment background investigation is required and is conditional pending results
Working Conditions
Work will be performed in an office environment. Many requests will arrive via helpdesk ticketing system, phone or in-person. The person must be able to speak and respond to the requester clearly. The person will work extended periods seated in front of a computer. The person must be able to operate a computer, keyboard, and mouse.
Supplemental Information
Benefits:
Do you know what Total Compensation is? Click here
Agency Contact Information: Melinda Garcia Email
For information on Statutory Requirements for this position, click the Classification Description link on the job advertisement.
Bargaining Unit Position
This position is not covered by a collective bargaining agreement.
