Senior Information Security Analyst job in Bellingham

The Information Technolodgy Department has an opening for a Senior Information Security Analyst. For full job posting and to apply, visit www.cob.org/employment. 

***This position is open until filled with a second review of applications on November 5, 2021 at 4:30 pm. The position may be closed at any time following the first review. ***

The current full salary range for this position is $7,194/month - $8,715/month. Placement within the range is based on qualifications and professional experience in accordance with City policy. This position is represented by a union.

Flexibility and work/life balance are important to the City of Bellingham. Remote work policy effective Jan. 2022 will allow 3 days remote per week. We allow some “flexing” of hours during each pay period to support work/life balance for employees. Willing to hire at 80% full time (with reduced benefits) if a shorter workweek is of interest.

JOB SUMMARY:

Oversees and serves as primary resource for administrative, operational, and technical aspects of the City’s security information event and vulnerability management systems. Prioritizes the availability, operation, maintenance, and security of the City's computer systems, networks and data. The City’s networks are a mission critical part of the City’s operation and provide services to over 30 staffed worksites and to numerous non-staffed locations.

Conducts risk assessments, evaluates security vulnerabilities, and monitors and analyzes City systems to identify priority mitigations. Provides direction, coordination, assistance and training support to City staff to correct identified security vulnerabilities and implement priority security controls. Prepares, plans and leads tabletop exercises for City staff based on City policies and procedures. Coordinates or supports ad-hoc information security projects. Participates in the selection of consultants to conduct outside risk assessments and/or pen tests. Reviews, drafts and improves incident response plans and procedures. Maintains detailed and accurate technical and administrative records. Serves as a member of the IT Security Team. Leads and/or assists with internal technical investigations.

Assists the Director and Network Operations Manager in developing programs to ensure City compliance with regulatory, security, and privacy standards such as Criminal Justice Information Services (CJIS), Health Insurance Portability and Accountability Act (HIPAA) and Payment Card Industry Data Security Standard (PCI DSS), along with security and privacy standards adopted by the City.