Senior Information Technology Security Analyst Services

The vendor is required to provide to serve as a senior IT security analyst for the state benefits program from July 1, 2025 through June 30, 2026, as described herein.
- Review state benefits program documentation, policies, plans and procedures and recommend updates based on best practices, state and federal laws and regulations.
- Serve as a consultant for the overall planning and analysis of the security architecture of information systems.
- Provide technical advice and guidance to business partners, the state’s office of information security and privacy, deputy CISO, and the CISO as well as to other IT managers and staff to design solutions that meet the state’s requirements.
- Directly participate in information security short and long-term planning processes for the state benefits program.
- Evaluate security and privacy needs of all aspects of the state benefits program.
- Assist with security and privacy review and attestation activities.
- Identify gaps and shortfalls of plans, practices, and work to mature the overall security and privacy posture of the program.
- Assist in the analysis of security and privacy incident reports to the state benefits program security and privacy team.
- Provide incident response support as needed.
- As required, represent the office of information security and privacy at meetings with other governmental or agency officials.
- review and update security, privacy, and compliance documentation.
- Respond to and recommend remediations for audit findings.
- Audit, review and recommend actions of requests for access rights to system functionality through the 7078 processes.
- Contribute to the alignment of security governance with enterprise architecture governance and project and portfolio management (ppm).
- Develop, review, update, and present security and privacy training and tabletop exercise materials and reports.
- Contract Period/Term: 1 year
- Questions/Inquires Deadline: April 08, 2025