Entry Level IT Security Analyst Jobs

Design, implement and oversee operations for VDOT information technology projects or programs. Ensure operations are conducted in alignment with information technology strategies. Leads a team in analyzing data, monitoring performance, developing policies and procedures and resolving complex problems and issues. Serve as the statewide cybersecurity analyst and supervisor for assigned area of VDOT’s cybersecurity program. Provide cybersecurity coverage for VDOT’s growing technology environment, which could include data, cloud (Azure), systems, network, account, highway infrastructure, and roadway device security.

How you will contribute:

• Administrative Activities: Support agency security audits, executive security status reporting, and related administrative tasks.

• Compliance: Comply with VDOT and IT policies, standards and guidelines. Ensure all projects are in compliance with VDOT and COV policies, procedures and guidelines.

• Cyber Security Tools: Deploy and configure cybersecurity tools in coordination with VDOT peers. Administer cybersecurity tools on an ongoing basis to ensure correct operation and appropriate access. Periodically verify that cybersecurity tools are operating effectively to monitor all in scope devices and system.

• Cybersecurity Coordination: Coordinate cybersecurity activities among all VDOT stakeholders in assigned areas of responsibility. Chair security governance committees as needed. Periodically meet with staff across VDOT in assigned areas of responsibility to discuss both routine and emerging security related issues. Communicate with vendors as needed regarding security requirements.

• Cybersecurity Incidents: Respond to cybersecurity incidents or other high priority cybersecurity items. Perform digital forensics support activities as needed to support resolution of security incidents. Provide reports on cybersecurity incidents and lessons learned to improve the agency security posture.

• Documentation and Reporting: Provide status reports on project plans, timelines, schedules and progress updates. Participate in strategic planning for systems. Prepare documentation. Develop and update user manuals. Prepare materials and conduct user training.

• Policies and Procedures: Develop policies, guidelines and standard operating procedures related to assigned technology program area. Document best practices, and review and update policies and guidelines as changes occur. .

• Policies and Standards: Develop and update on an annual basis cybersecurity policies and standards for VDOT’s operations technology infrastructure. Assist in the performance of security risk assessments as needed. Monitor trade publications and other industry sources to provide agency guidance on possible future security issues that may impact the VDOT operations technology infrastructure.

• Project Collaboration: Collaborate with other section team members on projects and programs and participate on project teams. Share knowledge with other team members and encourage their participation.

• Project Support: Leads staff and serves as Project Manager for assigned technology program and projects. Serve as a senior technical resource.

• Security Analysis and Monitoring: In coordination with VDOT stakeholders, perform ongoing security analysis and monitoring of the VDOT technology environments in the assigned area of responsibility including - Identify and correct security vulnerabilities; identify and respond to potential security breaches; monitor and communicate security bulletins from industry experts for remedial action as needed; periodic verification that technology devices meet baseline security standards; review security event logs for possible issues and follow up.

• Security Reviews and Recommendations: Make security related recommendations for new products. Review proposed configuration changes for a security impact and approve or deny requests as appropriate.

Strategic Management: Work with peers and subordinates to define strategic direction for assigned technology program. Evaluate tools and prioritize work efforts with stakeholders from ITD and business units.

What will make you successful:

• Ability to analyze and resolve complex business problems.

• Ability to analyze, design, develop, troubleshoot and implement technology solutions.

• Ability to communicate effectively orally and in writing with internal and external customers.

• Ability to develop, interpret, apply, and make changes to policies and procedures.

• Ability to develop, promote, and implement strategic and tactical initiatives to support the business of VDOT.

• Ability to establish and maintain professional working relationships and interact effectively with customers and vendors.

• Ability to multi-task in a fast-paced environment.

• Ability to supervise, plan, and schedule the work of a professional staff and coordinate large initiatives.

• Comprehensive knowledge of cyber, information and administrative security related issues.

• Considerable experience with business practices, budgeting, accounting and support service operations for large government or business organizations.

• Knowledge of document and records management principles and vital or sensitive information classification policies and procedures as well as personnel intelligence and background review processes.

• Knowledge of project planning and scheduling; business continuity of operations planning; audit and compliance programs; and pertinent laws, regulations, and best business security practices.

• Knowledge of supervisory principles and practices to include performance management and discipline.

• Knowledge of technology and methodology of computer and network systems and software.

• Skill in organizing and prioritizing activities.

• Skill in the use of computers and Microsoft Desktop products, security, networking, and troubleshooting tools.

Minimum Qualifications:

• Ability to analyze and resolve complex business problems.

• Ability to communicate effectively orally and in writing with customers.

• Ability to supervise, plan, schedule the work of a professional staff and coordinate large initiatives.

• Comprehensive knowledge of cyber, information and administrative security related issues

• Considerable experience with business practices, budgeting, accounting and support service operations for large government or business organizations.

• Knowledge of document, records management principles, vital or sensitive information classification policies, procedures as well as personnel intelligence and background review processes.

• Knowledge of project planning and scheduling; business continuity of operations planning; audit and compliance programs; and pertinent laws, regulations, and best business security practices.

• Knowledge of supervisory principles, practices to include performance management and discipline.

• Skilled in the use of computers, software and network applications.

Additional Considerations:

• A mix of experience in various IT disciplines such as networking and system administration.

• Certified Information System Security Professional or comparable designation (Security+, CISA, CEH, GCIH, GSEC, Microsoft Azure security certification).

• Experience in computer networking and network security.

• Experience in the IT Security field.

• Experience working on cybersecurity of operations technology infrastructure.

Click below to learn more about the Competency Model associated with this Position:
Competency Model

Physical Requirements
Physical Requirements

VDOT employees must abide by VDOTs Code of Ethics and the Commonwealths Standards of Conduct.
VDOT Code of Ethics
Standards of Conduct