Experience Inc. Jobs

Job Information

Illinois Department of Innovation & Technology IT Security Audit Compliance Coordinator (Public Service Administrator, Option 3) in Springfield, Illinois

This job was posted by https://illinoisjoblink.illinois.gov : For more information, please see: https://illinoisjoblink.illinois.gov/jobs/12188242

25% Subject to administrative direction, serves as the IT Security Audit Compliance Coordinator for the Department of Innovation & Technology (DoIT) supporting the Department of Human Services (DHS):

  • Performs functions as the department\'s audit liaison with Federal, State, and internal auditors in conjunction with the Office of the Statewide Chief Information Security Officer.
  • Gathers documentation and information requested by auditors in relation to information systems.
  • Prepares responses to audit findings using best practices as defined in Control Objectives for Information and Related Technologies (COBIT).
  • Prepares reports and recommends reviews to address related audit findings and corrective actions to include plan of action and milestones.
  • Reviews documentation to ensure adherence to DoIT and DHS standards and procedures through liaison with internal audit for quality assurance related audits.
  • Represents the division at audit entrance and exit conferences.

20% Plans the development and publication of the standards manual including application development of mainframe applications, web-based applications, client-server technology and networks:

  • Develops and revises standards and procedures allowing for the incorporation of the most recent technology tools such as divergent operating environment applications including Windows, AIX (and similar platforms).
  • Drafts and enacts office procedures.
  • Reviews standards and processes to ensure compliance with Federal and State laws, DoIT Enterprise Information Security Policies, and DHS directives, policies, regulations, guidelines, and industry best practices including National Institute of Standards and Technology (NIST) cybersecurity guidelines and its Risk Management Framework (RMF).\

20% Assists in providing employees of the agency, other entities, and external entities authorized access to agency data, systems, and applications:

  • Monitors reports and documents to verify proper access and assists in revoking access when required.
  • Reviews reports and documentation to ensure users are grouped accordingly and that permissions are based on need to know and required to perform job duties and responsibilities.

15% Serves as the division\'s Disaster Recovery Coordinator under the direction of DOIT\'s Disaster\ Recovery Manager:

  • Directs the review and modernization of the Agency\'s data processing Disaster Recovery Plan in alignment with best practices as defined by the Disaster Recovery Institute International (DRII).
  • Develops and maintains all data-related Inter-Agency Agreements as required regarding the exchange of computerized data with other State or non-State entities.

15% Serves as a working supervisor:

  • Assigns and reviews work.
  • Provides guidance and training of assigned staff.
  • Counsels staff regarding work performance.
  • Reassigns staff to meet day-to-day operating needs.
  • Establishes annual goals and objectives.
  • Approves time off.
  • Prepares and signs performance evaluations.

5% Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.\

DirectEmployers