NYS DOT HBITS-07-14507 Expert Security Analyst

Opportunity Details

Full Time NYS DOT HBITS-07-14507 Expert Security Analyst

Albany, NY

Voyatek delivers outcome-driven technology solutions to public sector agencies and higher education institutions nationwide.

For example, our technology:

• Facilitates access to nutritious food for children of mothers participating in the WIC program
• Supports first responders in reducing opioid overdoses within their communities
• Empowers colleges and universities to identify and thwart financial aid fraud
• Equips teachers with valuable insights to identify students requiring additional support
• Enhances efficiency for state tax agencies, leading to 99% faster return processing and quicker refunds for taxpayers

With a focus on Tax & Revenue, Health & Human Services, and Justice & Public Safety, Voyatek combines the scale to support large complex projects with the agility and accessibility of a boutique solutions provider. Together, Voyatek and its customers work to improve population wellbeing, create safer communities, and foster a thriving economy.

We're more than a technology company -- we're an outcomes company.

We encourage our employees to think differently, ask tough questions, and relentlessly pursue what's best for our customers and the residents they serve.

We believe that the value of technology is defined by its human impact. If you agree, you've come to the right place.

Voyatek is seeking applicants to occupy the position of Expert Security Analyst within our team .

Key Responsibilities:

Under the direction of a Senior Information Security Analyst, ITS 4 [SG 25], or Information Security Officer, MITS 1, within the Security Services Team the position will be a member of an ITS Dedicated Security Services Team that provides security services to the NYS Department of Transportation. The incumbent will provide in-depth information security, privacy, and artificial intelligence consulting and services aligned with business needs of the client agency, DOT, to ensure confidentiality, integrity, and availability of information and systems.
The incumbent will work with other ITS teams and upper-level agency management to resolve technically complex and politically sensitive issues under pressure.
The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS. Duties include, but are not limited to:
• Implement information security and compliance programs for Information Technology (IT) systems and Operational Technology (OT) systems.
• Conducting written risk assessments (security, privacy, Artificial Intelligence) for existing systems/solutions, new systems/solutions, and services in use or to be used by the business.
• Assist with management and resolution of security risks and/or threats to business information and operational systems.
• Serve as information security analyst and evaluate systems and contracts for alignment with Business and State information security policies and standards as well as other laws, regulations, and industry best practices, as applicable.
• Assist with risk register management and vulnerability management
• Monitor and remain aware of information security industry trends, tools, and techniques.
• Perform additional duties as required.

Qualifications:

• 84+ months: Candidate is able to provide guidance to large teams and/or has extensive industry experience and is considered at the top of his/her field.

Preferred Qualifications:

• 84 months experience evaluating information security, privacy, and compliance for Information Technology systems and/or Operational Technology systems.
• 84 months experience conducting written risk and compliance assessments for security, privacy, and/or Artificial Intelligence using industry standards and frameworks such as NIST, CIS Critical Controls, ISO 27001, etc.
• 60 months experience triaging and determining mitigation plans (with and without Vendor) to resolve security risks and/or threats to business information systems and operational technology systems
• 60 months experience evaluating business systems (Commercial Off the Shelf and Custom Developed) for alignment with Information Technology and/or Operational Technology security policies, standards, laws, regulations, and industry best practices.
• 60 months experience in evaluating security controls for cloud environments.
• 60 months experience working with cross functional teams to mitigate or remediate system and application vulnerabilities
• 48 months experience in risk management (including third-party), vulnerability management, and security program management
• 48 months experience in threat assessment and/or Incident Response management for information security and/or operational technology systems.
• Bachelor's Degree (or higher) in one or more of the following: Information Security, Information Assurance, Cybersecurity, Computer Science, Information Science, Information System Management, Digital Forensics, Compliance and Risk Management
• One or more of the following certifications: GICSP, GSEC, CISSP, CCSP, CCSK, CompTIA Cloud+, GCSA, CompTIA Network+, CompTIA Security+, CompTIA CySA+, CIPT, CIPP, CIPM, CISSP, CRISC, ISSAP, ISSEP, CGRC, CSSLP, SSCP, or other applicable information and/or cybersecurity, privacy, artificial intelligence, or risk management certifications

The wage range for this role reflects the wide array of factors considered in compensation decisions. These factors include, but are not limited to, skill sets, experience, training, licensure and certifications, and geographic location. Compensation decisions are based on the unique facts and circumstances of each case. A reasonable estimate of the hourly range is $ 64 .00 - $ 68 .00.

At Voyatek, we believe in supporting our employees with a comprehensive benefits package designed to enhance their well-being and professional growth. Please note that eligibility for certain benefits may vary based on your role and employment status.

• Flexible Work Schedules
• Health, Dental, and Vision Insurance
• Medical, Limited, & Dependent Flexible Spending Accounts (FSA)
• Health Savings Account (HSA) with Employer Contributions
• Company-Paid and Voluntary Life Insurance
• Long and Short-Term Disability Insurance
• Accident, Critical Illness, & Hospital Indemnity Insurance
• 401(k) Retirement Plan with Company Match and Immediate Vesting
• Wellhub Fitness and Wellness Platform
• Pet Insurance
• Training Opportunities
• Employee Referral Bonus Program

We are committed to fostering a workplace that supports both your personal and professional aspirations.

As part of our commitment to maintaining a compliant workplace, all final candidates will undergo and must successfully pass a pre-employment (post offer) background check. The background check may include, but is not limited to, verification of employment history, education, criminal records, and other relevant checks. Background check results will be evaluated in accordance with applicable law. For certain positions, additional client-specific background screenings may be required at the time of hire or in the future, in accordance with client requirements.

If you think you are a good fit for us, we encourage you to apply. Check out our career website for all open positions

Voyatek provides equal employment opportunities to all employees and applicants for employment. Voyatek will make employment decisions without regard to race, color, creed, ancestry, national origin, citizenship, sex or gender (including pregnancy, childbirth, and pregnancy-related conditions), gender identity or expression (including transgender status), sexual orientation, marital status or domestic violence victim status, religion, age, disability, genetic information, service in the military, or any other characteristic protected by applicable federal, state, or local laws and ordinances. Employment decisions include all terms and conditions of employment, including recruitment and hiring, job assignment/ placement, promotion, upgrading, demotion, termination, layoff, recall, transfer, leave of absence, rates of pay or other compensation, internship, and training.

---