23804 - IT Security Analyst

Provide direction, leadership and management of the VDOT Information Security Awareness Program. Formulate plans and develop policies to implement and manage activities that promote Information Security Awareness in VDOT. Manage and direct development, presentation and evaluation of information security training to users. Research, analyze and evaluate new information security products and features. Oversee and direct testing of information security measures implemented in VDOT applications. Participate in the development, testing and implementation of the VDOT COOP Plan. Coordinate information security awareness strategies with other VDOT stakeholders.

How you will contribute:

IT Policy Compliance: Ensure compliance with VDOT and VITA policies, standards and guidelines governing IT computer systems.

IT Program Support: Provide program support to assigned IT program area.

New Technologies: Research, analyze and evaluate information security awareness technologies and processes. Develop RFIs for evaluation of information security hardware and software. Meet with vendors and coordinate demonstrations of new products.

New Technologies: Research, analyze and evaluate information technologies and processes. Develop recommendations on trends in emerging technologies and best practices for incorporation into the VDOT programs. Research solutions to difficult problems and provide results and analysis to management.

Project Documentation: Prepare documentation, develop user manuals, develop training materials and conduct user training and testing.

Project Lead: Serve as functional or technical lead on new projects or projects to enhance and maintain existing information systems.

Security Administration: Administer the VDOT Information Security Awareness and Training program. Provide day-to-day operational oversight and support for training program. Develop guidance on information security practices, technologies and services to promote information security awareness. Provide consultation services related to risk assessments, business impact analyses, disaster recovery plans and implementation of information security awareness strategies. Provide end-user programs to articulate end-user responsibilities. Incorporate acceptable use policy in training programs and establish mechanisms to identify and report violations.

Security Training: Develop, deliver and evaluate information security training for VDOT employees and other users statewide. Respond to User Network System Access Requests in the SARA on-line applications and to SARA System Alerts related to the training tool. Resolve system issues and errors. Maintain information security awareness web page.

Training: Develop, deliver and evaluate information technology training for VDOT employees and other users statewide. Provide content and management for on-line training system and other manual and automated training tools. Evaluate program effectiveness and implement improvements.

What will make you successful:

Ability to analyze and debug data.

Ability to be detail-oriented, organized and self-motivated.

Ability to communicate effectively orally and in writing with internal and external customers to include making presentations and conducting training.

Ability to develop, deliver and evaluate on-line training programs in multiple formats.

Ability to document workflows.

Ability to establish and maintain effective working relationships with agency business and technical staff, other governmental employees, and vendors.

Ability to investigate, research analyze and evaluate information security trends and management practices and make program recommendations.

Ability to investigate, research, analyze and evaluate information technology trends and management practices and make program recommendations.

Ability to multi-task.

Ability to negotiate time frames.

Ability to provide technical support to customers by analyzing, designing, developing and implementing technology solutions.

Ability to think analytically and strategically.

Knowledge of applications systems development, security models and architecture, access models, telecommunications and networking,

Knowledge of complex information security programs and principles serving multiple operating units, locations and missions.

Knowledge of project management best practices.

Knowledge of security trends, security management practices, security models and architecture, and security policies.

Skill in short and long range planning.

Skill in the use of computers and software and hardware applications.

Minimum Qualifications:

Ability to communicate effectively both orally and in writing on technical subjects.