[Hiring] Principal Information Security Analyst @City of Portland

Role Description

Help protect the technology and critical infrastructure that Portland communities depend on every day. The Bureau of Technology Services (BTS) is seeking two Principal Information Security Analysts to strengthen cybersecurity, reduce risk, and support reliable delivery of essential City services.

In this role, you will provide senior technical leadership across information technology (IT) and operational technology (OT) environments, including industrial control systems and supervisory control and data acquisition (ICS-SCADA) systems. You will translate complex security and compliance requirements into practical solutions that protect City information, support operational continuity, and improve cybersecurity maturity.

The two positions support the following service areas:

• Public Safety Service Area:
  • Bureau of Emergency Communications
  • Portland Bureau of Emergency Management
  • Portland Fire & Rescue
  • Portland Police Bureau
• Public Works Service Area:
  • Bureau of Environmental Services
  • Portland Parks & Recreation
  • Portland Bureau of Transportation
  • Portland Water Bureau

Both positions report to the Chief Information Security Officer (CISO) and work within a matrix reporting structure with their respective service area’s senior managers. Assignments may emphasize enterprise security architecture and engineering or OT cybersecurity and critical infrastructure resilience, depending on program priorities and candidate strengths.

These positions work primarily remotely, with onsite attendance required for operational needs and cybersecurity incidents. Remote work must be performed within Oregon or Washington.

What You’ll Do:

• Lead cybersecurity improvements:
  • Assess current capabilities, identify security gaps, and develop measurable improvement plans across City IT and OT environments.
• Advise on security architecture:
  • Guide technology teams and leadership on secure system design, cloud security, identity and access management, data protection, network security, and zero trust principles.
• Strengthen security operations:
  • Develop and improve technical baselines, secure configurations, monitoring, alerting, vulnerability management, and operating procedures.
• Protect critical infrastructure:
  • Partner with operational teams to address OT and ICS-SCADA risks, including network segmentation, secure remote access, vendor connectivity, monitoring, and recovery readiness.
• Assess and prioritize risk:
  • Conduct or support threat modeling, risk assessments, control reviews, vulnerability assessments, penetration testing, and audits. Recommend practical remediation and investment priorities.
• Support governance and compliance:
  • Align cybersecurity practices with City policies, applicable regulatory requirements, and recognized frameworks. Prepare documentation and evidence that support audits and compliance reviews.
• Integrate security into City projects:
  • Participate in architecture reviews and help incorporate cybersecurity requirements into technology planning, procurement, implementation, and service operations.
• Support incident response:
  • Assist with investigation, containment, recovery, and improvements following cybersecurity incidents.
• Build shared understanding:
  • Explain technical findings and risks to diverse audiences, document recommendations and decisions, and support training and knowledge sharing across teams.

Qualifications

• Experience providing senior technical leadership in cybersecurity architecture, risk management, and compliance across complex enterprise technology environments.
• Experience with cybersecurity frameworks and standards, including the NIST Cybersecurity Framework and relevant NIST Special Publications.
• Experience in enterprise security practices across networks, systems, applications, cloud platforms, operating systems, and virtualization.
• Experience evaluating or improving cybersecurity operations using tools and practices such as SIEM, EDR, intrusion detection and prevention, firewalls, vulnerability management, and penetration testing.
• Experience interpreting and supporting applicable regulatory requirements and cloud security controls.
• Experience analyzing complex cybersecurity issues, developing clear technical documentation and actionable recommendations.

Requirements

• Selected candidates must pass a comprehensive background investigation.
• Possess a valid Oregon or Washington driver’s license.
• Be able to travel to City facilities when needed.

Preferred Qualifications

• Experience with operational technology (OT), industrial control systems (ICS), supervisory control and data acquisition (SCADA), and distributed control systems.
• Experience applying OT cybersecurity guidance, such as NIST SP 800-82 or ISA/IEC 62443.
• Experience in use of industrial protocols, such as Modbus, DNP3, and OCP.
• Experience implementing OT monitoring, anomaly detection, secure remote access, vendor access controls, or incident response processes.
• Experience supporting architecture review boards, enterprise risk management, governance, risk, and compliance tools, or cybersecurity maturity programs.
• Experience working in government, utilities, healthcare, or other regulated or critical infrastructure environments.
• Experience developing cybersecurity strategies, architecture roadmaps, maturity models, or measurable improvement plans.
• Relevant cybersecurity certifications, such as CISSP, CISM, CISA, GIAC, CCSK, or comparable credentials.

Application Process

Submit your resume and cover letter by the closing date. (Optional) Submit Veterans’ Preference documents, if applicable.

If this is your first time applying with the City of Portland, or if you haven’t requested veteran preference before, please attach your DD214-Member 4 and/or VA Benefit Letter to your application.

Click here for application tips for resume, supplemental question response and/or cover letter.