Job Description

Requisition No: 876157

Agency: Financial Services

Working Title: INFORMATION SECURITY ANALYST IV - 43004418

Pay Plan: Career Service

Position Number: 43004418

Salary: $90,000.00 - $110,000.00

Posting Closing Date: 06/03/2026

Total Compensation Estimator Tool

*****OPEN COMPETITIVE EMPLOYMENT OPPORTUNITY*****

CLASS TITLE: INFORMATION SECURITY ANALYST IV

DIVISION: OFFICE OF INFORMATION TECHNOLOGY

BUREAU: ENTERPRISE APPLICATIONS

CITY: TALLAHASSEE

COUNTY: LEON

Four (4) years of experience in Management Information Systems (MIS), Computer Science, Information Systems, Information Technology, or related field is required A post-secondary degree in Management Information Systems (MIS), Computer Science, Information Systems, Information Technology, or related field may be used as an alternative for the years of experience on a year-for-year basis.

Additional requirements:

• Five (5) or more years of progressive experience in cybersecurity, with significant experience in vulnerability management or security operations.
• Five (5) or more years of experience administering enterprise vulnerability scanning and reporting tools in large-scale environments.
• Excellent interpersonal and communication skills (English Proficient).

Preferences:

• Familiarity with scripting or automation tools such as PowerShell, Python, or APIs for scan orchestration and reporting.
• Professional certifications such as CISSP, GSEC, GPEN, CEH, Security+, or vendor-specific certifications related to vulnerability management platforms.

Minimum Qualifications for this position include the following REQUIRED ENTRY LEVEL KNOWLEDGE, SKILLS AND ABILITIES:

• Knowledge of Florida statutes, rules related to IT and information security.
• Knowledge of National Institute of Standards and Technology (NIST) security standards.
• Knowledge of vulnerability management frameworks, lifecycle processes, and industry best practices.
• Knowledge with enterprise vulnerability scanning tools such as Tenable, Qualys, Rapid7, or equivalent platforms.
• Knowledge of CVE, CVSS, CWE, patch management, and common attack vectors.
• Knowledge of operating systems, network protocols, firewalls, cloud platforms, databases, and enterprise applications.
• Knowledge of security standards and frameworks such as NIST SP 800-53, NIST CSF, CIS Controls, and ISO 27001.
• Ability to interpret technical vulnerability data and translate findings into actionable remediation guidance.
• Ability to manage multiple priorities and coordinate cross-functional remediation efforts in complex enterprise environments.
• Ability to analyze, interpret and operationalize statutes, rules, guidelines, policies and procedures.
• Ability to write policies, procedures and guidelines.
• Ability to analyze and interpret computer related data.
• Ability to communicate business information effectively and in writing to users and information technology personnel.
• Ability to work independently.
• Ability to determine work priorities, assign work and ensure proper completion of work assignments.
• Ability to communicate effectively in oral and written form.
• Skilled in establishing and maintaining effective working relationships with others.
• Skilled in analytical, organizational, and communication with the ability to present technical information to both technical and non-technical audiences.

SPECIAL NOTES:

This position may be required to occasionally perform duties other than those listed on the position description.

This position requires a security background check, including fingerprint as a condition of employment.

Salary Range (PB): $ 90,000.00- $110,000.00 Annually

Employees of the Department of Financial Services are paid on a monthly pay cycle.

Responses to qualifying questions must be clearly supported by the state application and any omission, falsification, or misrepresentation in the answering of the qualifying questions will be cause for immediate elimination from the selection process.

BRIEF DESCRIPTION OF DUTIES

The Information Security Analyst IV serves as the senior-level lead responsible for the administration, operation, and continuous improvement of the organization’s Vulnerability Management Program. This position is responsible for identifying, assessing, prioritizing, tracking, and reporting cybersecurity vulnerabilities across enterprise systems, applications, and network infrastructure. The analyst provides strategic oversight of vulnerability scanning technologies, coordinates remediation efforts with technical stakeholders, and ensures timely mitigation of identified risks in alignment with organizational security policies and regulatory requirements.

If you are a retiree of the Florida Retirement System (FRS), please check with the FRS on how your current benefits will be affected if you are re-employed with the State of Florida. Your current retirement benefits may be canceled, suspended, or deemed ineligible depending upon the date of your retirement.

Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center (1-866-663-4735). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation.

The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.

VETERANS’ PREFERENCE. Pursuant to Chapter 295, Florida Statutes, candidates eligible for Veterans’ Preference will receive preference in employment for Career Service vacancies and are encouraged to apply. Certain service members may be eligible to receive waivers for postsecondary educational requirements. Candidates claiming Veterans’ Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214 Member Copy #4) along with any other documentation as required by Rule 55A-7, Florida Administrative Code. Veterans’ Preference documentation requirements are available by clicking here All documentation is due by the close of the vacancy announcement.