Best Program Security Analyst- #26-25771

• Duration: 9 months
• The BEST Technical Security Analyst will work for the Deputy Program Manager and Solution Technical Lead to support the adoption of the future state end user security solution and protocols.
• Deploy technical controls to meet specific end-user security requirements, enable processes and standards to ensure that security configurations are maintained in the new Human Resource Management and Payroll solution.
• The BEST Technical Security Analyst will be a part of the BEST Technical Implementation team and work closely with the other members of the BEST team to develop and implement a comprehensive information security program.
• Implement security policies, processes, and standards related to end user roles, data access for application users, and user provisioning and de-provisioning.
• Provide operational support for the BEST team, product vendors, and CMW users.
• Identify end-user roles and permissions needed for the new Human Resource Management and Payroll solution.
• Develop procedures for rolling out user security in conjunction with the SI and product vendors, office of the comptroller, EOTSS, and agency staff.
• Partner with the BEST Team, SI, and product vendors, CTR, and EOTSS to identify security requirements using risk and business impact assessments.
• Ensure completion of information security operational documentation.
• Perform configuration updates and execution roles in application development and implementation related to security requirements and controls.
• Participate and support data conversion of end users from the legacy system to the new system.
• Advise the BEST Team and SI and product vendors regarding end user security roles and groups, data access controls, and security role provisioning and de-provisioning protocols.
• Support the definition and implementation of the security needs along with the BEST Security Workstream.
• Monitor daily or weekly reports and security logs for unusual events.
• Maintain an awareness of existing and proposed security-standard-setting groups, state and federal legislation, and regulations pertaining to information security.
• Research and assess new threats and security alerts and recommend remedial actions.
• Extensive experience providing operational security support to end users.
• More than 3 years of experience in developing, documenting, and maintaining security policies, processes, procedures, and standards.
• Minimum of five years of implementation and operational experience in IT.
• Experience working with modern issue tracking systems (JIRA).
• Understanding of enterprise security best practices, including IAM, RBAC, Network Security, SaaS, Cloud Security, Data Security, Encryption, and File transfer management.
• In-depth exposure to defining and implementing end user security protocols in large public or private sector entities.
• Knowledge of network infrastructure, including routers, switches, firewalls, and associated network protocols and concepts.

None flagged.