INFORMATION SECURITY ANALYST IV - 43004418

Requisition No: 876157 

Agency: Financial Services

Working Title: INFORMATION SECURITY ANALYST IV - 43004418

 Pay Plan: Career Service

Position Number: 43004418 

Salary:  $90,000.00 - $110,000.00 

Posting Closing Date: 06/03/2026 

Total Compensation Estimator Tool

*****OPEN COMPETITIVE EMPLOYMENT OPPORTUNITY*****

CLASS TITLE: INFORMATION SECURITY ANALYST IV

DIVISION: OFFICE OF INFORMATION TECHNOLOGY

BUREAU: ENTERPRISE APPLICATIONS

CITY: TALLAHASSEE

COUNTY: LEON

 

Four (4) years of experience in Management Information Systems (MIS), Computer Science, Information Systems, Information Technology, or related field is required. A post-secondary degree in Management Information Systems (MIS), Computer Science, Information Systems, Information Technology, or related field may be used as an alternative for the years of experience on a year-for-year basis.

 

Additional requirements:

• Five (5) or more years of progressive experience in cybersecurity, with significant experience in vulnerability management or security operations.
• Five (5) or more years of experience administering enterprise vulnerability scanning and reporting tools in large-scale environments.
• Excellent interpersonal and communication skills (English Proficient).

 

Preferences:

• Familiarity with scripting or automation tools such as PowerShell, Python, or APIs for scan orchestration and reporting.
• Professional certifications such as CISSP, GSEC, GPEN, CEH, Security+, or vendor-specific certifications related to vulnerability management platforms.

 

Minimum Qualifications for this position include the following REQUIRED ENTRY LEVEL KNOWLEDGE, SKILLS AND ABILITIES:

• Knowledge of Florida statutes, rules related to IT and information security.
• Knowledge of National Institute of Standards and Technology (NIST) security standards.
• Knowledge of vulnerability management frameworks, lifecycle processes, and industry best practices.
• Knowledge with enterprise vulnerability scanning tools such as Tenable, Qualys, Rapid7, or equivalent platforms.
• Knowledge of CVE, CVSS, CWE, patch management, and common attack vectors.
• Knowledge of operating systems, network protocols, firewalls, cloud platforms, databases, and enterprise applications.
• Knowledge of security standards and frameworks such as NIST SP 800-53, NIST CSF, CIS Controls, and ISO 27001.
• Ability to interpret technical vulnerability data and translate findings into actionable remediation guidance.
• Ability to manage multiple priorities and coordinate cross-functional remediation efforts in complex enterprise environments.
• Ability to analyze, interpret and operationalize statutes, rules, guidelines, policies and procedures.
• Ability to write policies, procedures and guidelines.
• Ability to analyze and interpret computer related data.
• Ability to communicate business information effectively and in writing to users and information technology personnel.
• Ability to work independently.
• Ability to determine work priorities, assign work and ensure proper completion of work assignments.
• Ability to communicate effectively in oral and written form.
• Skilled in establishing and maintaining effective working relationships with others.
• Skilled in analytical, organizational, and communication with the ability to present technical information to both technical and non-technical audiences.

 

SPECIAL NOTES:

This position may be required to occasionally perform duties other than those listed on the position description.

 

This position requires a security background check, includ