Information Security Specialist II

The posting

Primary Purpose:

To support Region 16 Education Service Center’s (ESC’s) Information Security Team in providing security services for the organization and/or contracted LEAs, with identified information security needs. This will include support for services offered to LEAs through Region 16 ESC’s Cybersecurity Services contract options, as well as assistance in creating, managing, and maintaining information security practices, policies, and documents to help protect Region 16 ESC’s critical assets. This position requires knowledge of network security, Internet security, security education, security policy, and data classification.

Qualifications:

Education/Certification

• Degree in Computer Science field or equivalent experience required
• CompTIA CASP+/SecurityX Certification or equivalent experience required
• OSCP: Offensive Security Certified Professional Certification or equivalent experience preferred
• CISSP: Certified Information Systems Security Professional Certification preferred

Skills

• Demonstrated experience in communication
• Demonstrated experience with professional or technical writing
• Demonstrated technical skills and experience with various computers and networks required
• Demonstrated experience documenting and maintaining configuration and process information required
• Experience with Palo Alto NGFW preferred
• Operating Systems (e.g., MCSE, ACSP) or networking (e.g., CCNA) certifications for data and videoconferencing or equivalent experience required
• Strong understanding of TCP/IP, SSL/TLS, and other network administration protocols
• Familiarity with various cybersecurity frameworks and industry standards.
• Knowledge of Office 365 and G-Suite for Education cloud platforms preferred
• Work experience in a K-12 education environment preferred
• Must be eager to learn and share new knowledge
• Highly self-motivated and directed
• Must be able to problem-solve
• Must be team and service-oriented

Working Conditions:

• Tools/Equipment Used: Standard office equipment including personal computer and peripherals
• Posture: Must be physically able to tolerate prolonged sitting, frequent standing; occasional bending/stooping, pushing/pulling, twisting, and standing
• Motion: Must be physically able to tolerate frequent standing and walking, repetitive hand motions, frequent keyboarding and use of mouse; occasional reaching, occasional driving
• Lifting: Must be physically able to tolerate regular light lifting and carrying (less than 15 pounds); may require occasional heavy lifting and carrying (45 pounds or more)
• Environment: Must be physically able to work inside; tolerate frequent districtwide travel and occasional statewide travel; regular exposure to noise
• Mental Demands: Must be able to work with frequent interruptions; maintain emotional control under stress; work prolonged or irregular hours on occasion
• Regular Attendance is an essential function

Major Responsibilities and Duties:

1. Assists the Information Security Team and/or contracted LEAs with services offered through Region 16 ESC’s Cybersecurity Services contract.
2. Oversees the implementation, configuration, and ongoing operation of logging across various network devices to support security monitoring, incident response, and compliance with industry standards.
3. Manages the encryption certificate system, including the issuance, deployment, renewal, and revocation of security certificates to ensure secure communication and compliance with industry standards.
4. Assists the Networking Security Administrator in the planning and design of enterprise security architecture, as needed, under the direction of the Chief Technology Officer or designee
5. Assists in the deployment, integration, and initial configuration of all new security solutions and any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise's security documents specifically
6. Assists the Information Security Team and/or contracted LEAs in solving any security-related problems and/or making recommendations for improvements.
7. Assists the Coordinator of Information Security and/or contracted LEAs in the planning and management of annual cybersecurity awareness training and reporting as required by House Bill 3834.
8. Serves as a technical resource to the Coordinator of Information Security, the Information Security Team, and/or contracted LEAs in the area of hardware and software security, as well as the deployment, configuration, and management of network-based or host-based firewalls.
9. Assists the Information Security Team and/or contracted LEAs in planning and conducting cybersecurity risk assessments and mitigation planning as required by Senate Bill 820.
10. Assists the Information Security Team and/or contracted LEAs in planning and conducting internal and external vulnerability scans and providing remediation.
11. Assists the Network Security Administrator in the creation, adoption, and implementation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) and practices under the direction of the Director of Technology Services or designee and in alignment with state, federal, and industry standards.
12. Assists the Network Security Administrator in the evaluation of appropriate enterprise resources and solutions.
13. Assists the ESC with the implementation of information security practices, policies, and procedures.
14. Work closely with technical staff on enterprise technology development to fully secure information, computer, network, and processing systems where necessary.
15. Maintains open communication and confidentiality with clients.
16. Researches and stays current on the latest information security technologies and regulatory environments.
17. Maintains a work schedule that will provide 7 days a week and 24 hours a day availability for support of the related networks and devices.
18. Provides assistance in the areas of technology as identified by the advisory committee and Technology Services clients.
19. Periodic travel required.
20. Maintains a functioning cell phone and is accessible through this phone as deemed appropriate by the Chief Technology Officer. A functioning cell phone means that it is charged, activated, messages checked, and mailbox emptied regularly.
21. Reports for work ready to perform responsibilities.
22. Performs duties that directly and/or indirectly impact student performance in Region 16.
23. Maintains a professional level of confidentiality regarding all ESC matters.
24. Supports the mission, goals, and objectives of the ESC strategic plan.
25. Upholds and adheres to safety rules and policies of the ESC safety program.
26. Performs professional responsibilities as required by ESC policies, processes, and procedures.
27. Manages time, calendar, and job responsibilities to meet deadlines.
28. Meets proficiency levels of required technology skills as outlined by supervisor.
29. Incorporates appropriate technology in daily work and exhibits continual growth in technologies as outlined by supervisor.
30. Performs other duties as assigned.