[Hiring] Cyber Security Business Systems Specialist @City of Durham

Role Description

The purpose of this position is to assist the Senior Cyber Security Analyst in the daily management of the City's cyber security program. The Cyber Security Bus Sys Spec will assist the Senior Cyber Security Analyst in conducting security assessments of systems to identify vulnerabilities, providing recommendations for their remediation, and assisting system owners in implementing effective safeguards. Validating that controls are risk rated and risk statements are clearly stated and capture the specific business impact to the judiciary in the event that a deficiency is exploited.

Duties/Responsibilities

• Assist the Senior Cyber Security Analyst in developing security assessment plans for systems, including objectives, scope, schedule, required documentation, possible risks, and other logistical items for security assessments.
• Assist in developing cloud service provider testing approach from a security perspective.
• Provide validation of security control tests for cloud service providers and coordinate access to systems and approvals for scanning activities.
• Conduct ad hoc testing on an as-needed basis to assist with development activities or vulnerability remediation.
• Review/test system security controls (managerial, operational, and technical) to determine adequacy against federal requirements (e.g., NIST SP 800-53) and mission context.
• Document plans of action and milestones for corrective action following assessment activities and in response to identified vulnerabilities.
• Draft security policies and procedures including the system security plan, and agency-specific policies in accordance with NIST requirements.
• Routinely conduct risk assessments to quantify impacts of vulnerabilities.
• Recommend appropriate security training program for employees.
• May perform additional tasks upon request.

Qualifications

• High School Diploma or equivalent (GED, HiSet, TASC).
• One year of experience in cybersecurity, information security, information technology, network security, systems administration, vulnerability management, security operations, or a closely related field.

Requirements

• Hourly Rate: $24.23 - $29.45 per hour.
• Work Days/Hours: M-F 8am-5pm.