Title: Information Security Analyst - PCI
Location: 100% Remote (Equipments will be Shipped)
Duration: Long Term
- This is not an ISSO position
- Good understanding of PCI compliance and how to help get someone into ‘PCI rediness state’
- Government experience is OPTIONAL
- Look for someone who has Casino or Finance experience
Work involves planning, implementing, and monitoring security measures using the NIST Risk Management Framework, PCI Data Security Standards and Texas security frameworks for information systems and infrastructures. Works under minimal supervision, with extensive latitude for the use of initiative and independent judgment.
DUTIES The essential duties for this contract include
Assesses, develops and refines the TxTAG PCI Processes x Coordinates the implementation of system security plans with agency personnel and outside vendors.
Confers with users to discuss issues such as account permission and data access needs, security violations, and programming changes.
Advises management and users regarding security configurations and procedures.
Develops and recommends plans to safeguard information systems from accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
Participates in the development of information technology disaster recovery and business continuity planning.
Performs and reviews technical risk assessments and reviews of new and existing applications and systems, including data center physical security and environment.
Researches, evaluates, and recommends systems and procedures for the prevention, detection, containment, and correction of data security breaches.
Performs related work as assigned.
Skill Matrix Table
| Skills | Required/Preferred | Candidates Experience |
| Knowledge of common information security management frameworks such as the NIST Risk Management Framework, NIST Cybersecurity Framework, Payment Card Industry Data Security Standards (PCI-DSS), and Texas Information Security Standards | Required 3 years | |
| Demonstrated experience working with PCI assessments/ standards | Required 3 years | |
| Must possess a baseline certification meeting the DOD 8570 IAT Level III or above | Required | |
| Working in security as an ISSO or equivalent | Preferred 3 years | |
| Experience working in security in a Federal or State environment | Preferred 3 years | |
Required Skills : Follow the skill matrix table attached in job description