Overview

A&F IT is looking to fill the role of Cybersecurity Analyst that will report directly to the A&F IT Chief Information Security Officer (CISO). The Security Analyst is responsible for designing, building and driving aspects of the information security program. They will work closely with a broad range of constituents, serving as a subject matter expert on various projects and managing several programs. The successful candidate will be part of team responsible for enhancing the maturity and effectiveness of agency Information Security programs and adapting them for broader adoption across other A&F agencies.

Duties and Responsibilities

The selected candidate will:

• Build and manage the Cybersecurity Risk Management function.
• Establish and maintain policies and standards.
• Determine current state of cybersecurity controls through interviews and evidence.
• Document where controls do not meet policy or regulatory requirements.
• Communicate with business leadership to understand impact and requirements.
• Work with technology owners to define and plan control enhancements efforts to reduce risk and satisfy regulatory requirements.
• Create technology roadmaps to illustrate current state and the path to our desired state.
• Support Cybersecurity governance through reporting and tracking of projects for broader awareness.
• Participate in the third-party assessment process.
• Conduct risk assessments.
• Facilitate and manage external audits.

Skills:

• Working knowledge of NIST 800-53 or how to work with cybersecurity frameworks in general.
• Breadth of knowledge on cybersecurity controls.
• Ability to organize and structure large amounts of information to facilitate programs, processes and compliance.
• Ability to manage multiple programs.
• Ability to organize and run effective meetings.
• Strong analytical and communication skills.
• Interpersonal skills to develop strong collaborative working relationships with a broad range of constituents.

This individual must have:

• Excellent written and verbal communication skills.
• Exceptional attention to detail.
• Interest in and ability to interact effectively with diverse groups of people.
• Great problem-solving and decision-making skills.
• Ability to work independently and with minimal supervision.
• Ability to be discrete and keep sensitive information confidential.

This position reports to the A&F Chief Information Security Officer. It is part of A&F IT, overseen by the A&F IT Secretariat Chief Information Officer (A&F SCIO). A&F IT is comprised of over 200 employees working on IT systems and applications for 22 various A&F agencies, to include the Department of Revenue (DOR) which manages Commonwealth taxes and child support.

This position is assigned to A&F IT CISO, located at 1 Ashburton Place, Boston and MITC, 200 Arlington Street, Chelsea, Massachusetts. This individual will work on site and remotely (as approved by their supervisor).

An external candidate recommended for a position with The Office of Administration and Finance IT, will be subject to a background check that includes checks for: state and federal tax compliance; child support compliance; education verification; Massachusetts CORI checks; criminal background checks in state(s) of current and previous residence/employment; validation of eligibility to work in the United States; and national fingerprint-based criminal background checks.

Comprehensive Benefits

When you embark on a career with the Commonwealth, you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work experience that supports you, your loved ones, and your future.

Want the specifics? Explore our Employee Benefits and Rewards!