Information Systems Auditor (Cybersecurity Analyst)

Assist in developing a comprehensive cybersecurity program aligned with regulatory requirements and industry best practices.
Assist in building cybersecurity governance, risk, and compliance (GRC) initiatives and in crafting governing policies, standards, and best practices for the department and its regulated entities.
Serve as an information security expert to evaluate systems and contracts for alignment with agency and state information security policies.
Conduct cybersecurity risk assessments, threat and vulnerability analyses, and security testing; maintain the cybersecurity risk register with remediation tracking.
Develop communication materials for technical and non-technical audiences; assist in cyber incident response planning, procedures, and playbooks; design and facilitate tabletop exercises.
Perform cyber incident response and recovery activities as required; administer security awareness training and support ongoing cybersecurity program activities.