IT Senior Security Analyst

1. Work with enterprise information governance officials to help draft and administer IT-related information security policies and procedures, for example: Acceptable use, computer and software security, access account management, incident-response procedures, etc.
2. Track and triage security alerts from end-user reports and security monitoring systems. Make decisions about priority and initiate investigation or incident response activities as appropriate.
3. When breach incidents are detected, initiate and coordinate the Incident Response Plan, making sure the appropriate Security Incident Response Team members are assigned and all stakeholders are kept informed through all phases of the response. Capture root-cause findings and author incident reports.
4. Coordinate compliance management with line-of-business staff responsible for regulatory requirements that impact IT services.
5. Develop and deliver education and training programs for system users and IT staff to promote information security awareness across the enterprise. For example:
6. Develop and manage formal awareness training for City staff, especially new staff.
7. Work with end-users who have been victims of malware or social-engineering attacks to help them understand what happened and how to avoid such incidents in the future.
8. Train and mentor IT staff in information technology security industry standards and best practice.
9. Monitor and design metrics and audits to measure the effectiveness and compliance with security controls, policies and procedures.
10. Coordinate identity and access management program, working with City supervisors and data owners to establish access request and approval procedures as well as to develop and maintain re-usable job-role-based access profiles.
11. Review and triage results of routine and ad hoc vulnerability scans, assigning priority and appropriate IT remediation team.
12. Manage System Security Plan life-cycle for major applications as assigned. Work with project managers to incorporate System Security Plan deliverables into new IT projects.

Minimum Qualifications: Bachelor's Degree in computing technology field or a related degree with relevant coursework in areas such as software requirements analysis, systems development, or cyber security policy management

Minimum Experience: Six years of related experience

Equivalency: An equivalent combination of education and experience closely related to the duties of the position MAY be considered.

1. Knowledge of IT infrastructure systems configuration and operation. For example, operating systems (Windows preferred), mobile operating systems and applications, network routing and access controls, database management systems.
2. Knowledge of IT security infrastructure systems such as firewalls, anti-virus, intrusion prevention systems, SIEM monitoring systems.
3. Knowledge of IT solution development and testing methodologies, especially requirements definition and test plan development.
4. Knowledge of and ability to implement IT security standards and best practices programs in areas such as incident management, threat management, vulnerability management, etc.
5. Knowledge of multi-media content development and publishing applications.
6. Strong research and analytical skills.
7. Strong written, oral, and visual communication skills.
8. Ability to develop accessible learning materials that effectively translate technical concepts to non-technical audiences.
9. Ability to research and understand business drivers and processes in City Departments to ensure the appropriate balance between security and productivity.

As the largest and most vibrant city in the state, Minneapolis depends on purposeful, dedicated and innovative employees. Minneapolis has a large variety of careers for people of all experiences and backgrounds who come together for a singular purpose-serving the residents, businesses and visitors of Minneapolis.

The City of Minneapolis is proud to be an Equal Employment Opportunity employer.