What are the responsibilities and job description for the IT Security Analyst (CYFD/ITD #10118952) position at State of New Mexico?
Posting Details
At the New Mexico Children, Youth and Families Department (CYFD), every role is an opportunity to make a lasting difference in the lives of children, youth, and families across our state. We are committed to building a compassionate, skilled, and dedicated workforce that works collaboratively to ensure safety, promote well-being, and strengthen families. Whether you are in the field supporting families face-to-face, working behind the scenes to improve systems, or helping to shape the agency from a leadership level, your work here has purpose and long-lasting impact. Join a team that values integrity, resilience, and service, and be part of meaningful change for New Mexico's future.
THIS IS A SPONSORED/TERM POSITION
THIS POSTING MAY BE USED FOR ONGOING RECRUITMENT AND MAY CLOSE AT ANY TIME. APPLICANTS LISTS MAY BE SCREENED MORE THAN ONCE.
This position exists to support CYFD's implementation and ongoing compliance with SB42 by ensuring the security, protection, retention, and governance of electronic records and information systems. The position provides cybersecurity, risk management, compliance, and audit support to help safeguard sensitive agency data and ensure compliance with state and federal requirements.
How does it get done?
20% -Lead SB42 cybersecurity compliance activities, including monitoring compliance with electronic records retention, security, governance, and data protection requirements.
15% -Conduct cybersecurity risk assessments, security reviews, compliance evaluations, and third party/vendor security assessments for enterprise systems, cloud services, AI technologies, and applications.
15% -Develop, implement, and maintain cybersecurity policies, standards, procedures, governance documentation, and security controls to support SB42 and regulatory compliance.
15% -Administer, monitor, and optimize enterprise security technologies, including next generation firewalls, web filtering, intrusion prevention systems (IPS), VPNs, and network security controls to protect CYFD systems and data.
10%- Support security operations by monitoring security events, investigating alerts, coordinating incident response activities, vulnerability management, and remediation efforts.
10% -Coordinate audit readiness activities, compliance reporting, evidence collection, corrective action plans, and collaboration with DoIT, Legal, Privacy, Procurement, and internal CYFD stakeholders.
10% -Support identity and access management, security architecture reviews, secure configuration standards, and implementation of technical security controls across the enterprise.
5% -Promote cybersecurity awareness, governance initiatives, security metrics, and continuous improvement efforts to strengthen CYFD's overall security posture.
Minimum Qualification
Bachelor's degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and two (2) years of experience in IT security or compliance validation (e.g., HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling six (6) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g., CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g., PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience.
Employment Requirements
Must possess and maintain a valid Driver's License. Pre-employment background investigation is required and is conditional pending results.
Working Conditions
Work is performed in an office setting with exposure to Visual/Video Display Terminal (VDT) and extensive phone and personal computer usage. Direct client interaction and some travel may be required.
Supplemental Information
Do you know what Total Compensation is? Click here
Agency Contact Information: Yaciel Toledo, (505) 252-0736. Email
For information on Statutory Requirements for this position, click the Classification Description link on the job advertisement.
Bargaining Unit Position
This position is not covered by a collective bargaining agreement.
At the New Mexico Children, Youth and Families Department (CYFD), every role is an opportunity to make a lasting difference in the lives of children, youth, and families across our state. We are committed to building a compassionate, skilled, and dedicated workforce that works collaboratively to ensure safety, promote well-being, and strengthen families. Whether you are in the field supporting families face-to-face, working behind the scenes to improve systems, or helping to shape the agency from a leadership level, your work here has purpose and long-lasting impact. Join a team that values integrity, resilience, and service, and be part of meaningful change for New Mexico's future.
THIS IS A SPONSORED/TERM POSITION
THIS POSTING MAY BE USED FOR ONGOING RECRUITMENT AND MAY CLOSE AT ANY TIME. APPLICANTS LISTS MAY BE SCREENED MORE THAN ONCE.
- APPLICATIONS SUBMITTED WITHOUT WORK EXPERIENCE OR A RESUME WILL NOT BE CONSIDERED. IF ATTACHING A RESUME, RESUME MUST INCLUDE DATES OF EMPLOYMENT FOR EACH JOB (MONTH and YEAR) AND DETAILS OF WORK EXPERIENCE/JOB DUTIES*
This position exists to support CYFD's implementation and ongoing compliance with SB42 by ensuring the security, protection, retention, and governance of electronic records and information systems. The position provides cybersecurity, risk management, compliance, and audit support to help safeguard sensitive agency data and ensure compliance with state and federal requirements.
How does it get done?
20% -Lead SB42 cybersecurity compliance activities, including monitoring compliance with electronic records retention, security, governance, and data protection requirements.
15% -Conduct cybersecurity risk assessments, security reviews, compliance evaluations, and third party/vendor security assessments for enterprise systems, cloud services, AI technologies, and applications.
15% -Develop, implement, and maintain cybersecurity policies, standards, procedures, governance documentation, and security controls to support SB42 and regulatory compliance.
15% -Administer, monitor, and optimize enterprise security technologies, including next generation firewalls, web filtering, intrusion prevention systems (IPS), VPNs, and network security controls to protect CYFD systems and data.
10%- Support security operations by monitoring security events, investigating alerts, coordinating incident response activities, vulnerability management, and remediation efforts.
10% -Coordinate audit readiness activities, compliance reporting, evidence collection, corrective action plans, and collaboration with DoIT, Legal, Privacy, Procurement, and internal CYFD stakeholders.
10% -Support identity and access management, security architecture reviews, secure configuration standards, and implementation of technical security controls across the enterprise.
5% -Promote cybersecurity awareness, governance initiatives, security metrics, and continuous improvement efforts to strengthen CYFD's overall security posture.
Minimum Qualification
Bachelor's degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and two (2) years of experience in IT security or compliance validation (e.g., HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling six (6) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g., CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g., PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience.
Employment Requirements
Must possess and maintain a valid Driver's License. Pre-employment background investigation is required and is conditional pending results.
Working Conditions
Work is performed in an office setting with exposure to Visual/Video Display Terminal (VDT) and extensive phone and personal computer usage. Direct client interaction and some travel may be required.
Supplemental Information
Do you know what Total Compensation is? Click here
Agency Contact Information: Yaciel Toledo, (505) 252-0736. Email
For information on Statutory Requirements for this position, click the Classification Description link on the job advertisement.
Bargaining Unit Position
This position is not covered by a collective bargaining agreement.
Benefits:
Health Insurance, Vacation & Paid Time Off, Retirement PlanSalary : $33 - $50