INFORMATION SECURITY ANALYST IV - 37011231

Requisition No: 870717 

Agency: Environmental Protection

Working Title: INFORMATION SECURITY ANALYST IV - 37011231

 Pay Plan: Career Service

Position Number: 37011231 

Salary:  $53,000 - $60,000 

Posting Closing Date: 02/27/2026 

Total Compensation Estimator Tool

 

Information Security Analyst IV

State of Florida

Department of Environmental Protection

Internal Agency Opportunity

Anticipated Vacancy

This is an onsite position in Tallahassee, Florida. 

 

 

 

Position Overview and Responsibilities:

DEP’s Office of Technology and Information Services (OTIS) is currently recruiting for an Information Security Analyst IV.  This is a highly technical position that assists in the creation and execution of operational security initiatives on a continuing basis to improve the agency’s information security posture. The incumbent of this position will represent OTIS and must be helpful, cooperative, polite, respectful, and courteous at all times in interactions with customers.  

Specific duties and responsibilities include: 

• Assist in the creation, maintenance, and establishment of information security incident response plans and procedures. Per Rule 60GG-2, F.A.C. Information Technology Standards, this includes, but is not limited to:
• • • Developing and maintaining processes or protocols to ensure security requirements are incorporated into the change control process.
    • Establishing and maintaining policy and regulatory expectations for protection of the physical operating environment for agency-owned or managed IT resources.
    • Establishing and maintaining a policy and procedure review process that facilitates continuous improvement to protection processes.
• Assist with the following ISM duties required per Rule 60GG-2:
  • • Establishing and maintaining an information security program that includes information security policies, procedures, standards, and guidelines
    • Establishing and maintaining an information security awareness program
    • Establishing and maintaining information security risk management process, including the comprehensive risk assessment required by section 282.318, F.S.
    • Establishing and maintaining computer Security Incident Response Team
    • Establishing and maintaining a disaster recovery program that aligns with the agency’s Continuity of Operations (COOP) Plan
    • Proactively research latent security threats and recommend risk mitigation actions
    • Performing information security investigations that could potentially impact the employment status of employees (OPS, career service, SES, SMS, contractors)
    • Performing information security investigations in conjunction with the Inspector General’s Office and law enforcement agencies
• Review and modify firewall rules iteratively to be more secure.
• Manage and configure the agency’s endpoint security solution.
• Respond to information security incidents and execute countermeasures.
• Create, maintain, establish, and review application security standards and implementation plans and procedures as part of a secure software development lifecycle process.
• Review access requests and provide access control oversight.
• Maintain technical skillset to adapt to new technologies as they emerge including researching and recommending security-focused training for themselves and others in the division.
• Ensure cryptographic standards are maintained in systems and applications.
• Maintain compliance with CJIS (criminal justice) systems and recommend technologies and procedures, if required, for on-premises and cloud-based CJIS infrastructure.
• Evaluate desktop policies to ensure proper patching levels and security policies are maintained.
• Assist with non-routine and unforeseen administrative tasks because of incidents, activations, or direction of leadership.
• Research, analyze, draft, and implement cybersecurity policies and best practices which support DEP Enterprise.