Remote - IT Security Analyst

"ALL our jobs are US based and candidates must be in the US with valid US Work Authorization. Please apply on our website directly." Title: IT Security AnalystLocation: Raleigh, NCDuration : 12 monthsClient : State of North CarolinaNote: Above 10 years of Experience RequiredJob Description:Business & Policy Analyst PositionRequirementsAble to articulate IT value propositions from both a business and technical perspectiveExperience writing and reviewing IT, privacy, and/or security policies.Ability to develop business case/ROI for IT value propositionsAbility to transfer knowledge and other important or relevant information to others in the engagement channelMatrix management skills for DIT, client, vendors, and other involved parties/resourcesAbility to participate in the project to deliver the proposed and agreed upon solutionUnderstanding of general IT architectural principlesExcellent verbal and written communication skills including the ability to interact and communicate effectively with “S” level client executivesVertical business expertise and/or knowledge of horizontal solution capabilitiesSolid vendor interaction and management skills at a project levelAbility to transfer knowledge and other important or relevant information to others in the engagement channelStrong knowledge of and experience with business software technology, analysis tools and business case analyticsDetail oriented professional with experience using M365 applications to draft, review, outline, and understand business processes and policiesExperience with NC statewide security and privacy policiesPreferred Skills:Experience with NIST 800-53 rev5, NIST RMF and familiarity with NIST Privacy Framework, and NIST AI Framework.Experience developing a crosswalk or matrix of data classification and privacy and security controls.Experience creating, reviewing, and/or refining system data dictionaries with stakeholders.Experience with data asset classification of federally regulated stated and NC state-owned and controlled data, to include retention schedules.Experience developing and implementing standard operating procedures (SOPs) with regard to information privacy and security.Experience manually creating data dictionaries in Excel to record data owner, data table names, system business names, retention schedules, aligned privacy policies and notices, etc.Skills:SkillRequired / DesiredAmount of ExperienceExperience with NIST 800-53 rev5, NIST RMF and familiarity with NIST Privacy Framework, and NIST AI Framework.Required5YearsExperience developing a crosswalk or matrix of data classification and privacy and security controls.Required5YearsExperience creating, reviewing, and/or refining system data dictionaries with stakeholders.Required5YearsExperience with data asset classification of federally regulated stated and NC state-owned and controlled data, to include retention schedules.Required5YearsExperience developing and implementing standard operating procedures (SOPs) with regard to information privacy and security.Required5YearsExperience manually creating data dictionaries in Excel to record data owner, data table names, system business names, and retention schedules.Required5YearsExperience manually creating data dictionaries in Excel to record aligned privacy policies and notices, etc.Required5YearsExperience with NC statewide security and privacy policies.Highly desired5Years