Information Security Analyst job

Job Description: Title: Information Security AnalystDuration: 6 Months With a possible extensionClient: State of OR - DHS- Oregon Health Authority (OHA).Location: Salem, OR Job description: Required skills/experience:Maintains systems to protect data from unauthorized users.Identifies, reports, and resolves security violations.May require a bachelor's degree in area of specialty and at least 9 year or equivalent experience in the field or in a related area. Has knowledge of commonly-used concepts, practices, and procedures within a particular field. Relies on instructions and pre-established guidelines to perform the functions of the job.Lead or coordinate DHS/OHA incident response team(s) to appropriately respond and contain information security incidents. When incident involves the disclosure of information, assist the Privacy program incident coordinator when needed.Initiate ongoing review and analysis of the security environment and provide technical security recommendations to OIS management for continuous improvement.Provide information security guidance and consultation to DHS/OHA Office of Information Services (OIS), business units, partners and other State agencies, identify and document risks, provide recommendations and where necessary prepare risk mitigation recommendation report for executive management.Participate in the assessment of DHS/OHA programs, projects and initiatives to ensure compliance to federal and state laws, rules and regulationsDocument and complete cloud work books and system security plan.The Security analyst provides information security expertise throughout the systems development lifecycle in areas including but not limited to software development, access and control methodologies, operations and continuity planning. The individual in this position must exercise considerable independent judgement, have extensive knowledge of computer technology and information systems design.The individual must hold a current information security certification like CISSP or CISM.