Enterprise Application And ERP Solution Security Analyst

Note: We offer flexible work schedules and locations. This is a hybrid position where most of the work allows for telework. However, you will need to travel to in-person activities, meetings, and events. This position has been allocated as an Enterprise Application and ERP Solution Security Analyst.

What this job is about:

As an Enterprise Application and ERP Solution Security Analyst, you will provide technical expertise for security access management, regulatory compliance, security policy, and application-level security compliance. The position provides consultation in analyzing, assessing, and design applications -layer security controls.

This position contributes to the mission of the organization by working directly with external agencies, internal agency departments and business owners to provide consultation and support to ensure the Enterprise Application and ERP solution follow not only security best practices, but state guidelines and regulatory requirements for protecting sensitive and confidential data within these applications to sustain public trust in the agency's Enterprise Applications and ERP systems.

By joining our team, you'll foster innovation in our IT processes and provide support and confidentiality on high-risk issues that protects our information systems long-term.

Who we are:

Our work at the Office of Financial Management (OFM) serves as a crucial part of the decision-making that the governor, Legislature and state agencies do each year. As an employee of OFM, you will be part of a team of dedicated professionals who work hard every day to provide the vital information and services they need to serve the people of Washington.

If playing a key role in supporting and improving state government matters to you, you've found the right place.

What we offer our employees:

• Foster an environment of diversity, equity, inclusion and belonging. We strive to hire, cultivate and retain a competitive workforce that reflects the communities we serve.

• Encourage a healthy life/work balance by offering flexible/alternative work schedules, wellness program, mobile arrangements and telework opportunities.

• Employees (and their families) have coverage options for medical, dental, vision and basic life insurance.

• Opportunity to enroll in state retirement programs and a deferred compensation plan. 

• A minimum of 14 days of vacation leave per year and 12 paid holidays throughout the calendar year.

• OFM offers a commute trip reduction program, tuition reimbursement, membership to statewide Business Resource Groups and an Infants-at-Work program.

See our Benefits page for more information.

What you'll do:

• Analyze access management policies, procedures, methods for compliance with regulatory requirements and best practices.

• Consult with business data owners and external partners to design secure access management methods, processes, policies, and procedures for Enterprise Applications and the ERP solution.

• Investigate access management violations regarding unauthorized or inappropriate access.

• Use security tools and appliances to probe Department Enterprise Applications and ERP solution to validate compliance on system architecture, application configuration, patch management, access management, and other essential processes.

• Research current and emerging vulnerabilities and architect risk analysis methods to expose and mitigate the vulnerabilities.

• Research industry best practices and architect methods and processes to validate Department Enterprise Application and ERP information system implementation of sound security principles.

Required:

• Five or more years of demonstrated experience and expert proficiency in Enterprise level Applications and ERP access management, risk analysis, security assessments, and vulnerability analysis.

• Either a bachelor's degree or higher in information security or related field from an accredited institution OR a professional security certification, such as CISSP, CISA, or CEH, from a non-vendor specific industry recognized organization such as ISC2, ISACA, or the SANS institute

Desired:

• Master's degree in computer science or related field to information management or information security from an accredited institution.

• Experience with Workday ERP security alignment and configuration of controls.

• Demonstrated experience and proficiency in ERP security, programming language, writing computer scripts, or computer forensics.

• Knowledge of OCIO, CJIS CIS, NIST, FERPA, HIPAA, FISMA and FedRAMP frameworks.

Condition of Employment:

• You must successfully pass a criminal background check.

How to apply:

Click "Apply" at the top of this page to start your application (you can save the application and come back to it, if needed).

IMPORTANT: To be considered for this position, please include the following along with your completed application:

• Letter of interest: describing your specific qualifications.

• Resume:  that details your applicable experience and education.

• References: at least three professional references with current telephone numbers.

We will directly contact the top candidates to interview for this position. Because we base our selection on the information you provide, it is in your best interest to identify the knowledge, skills and abilities that address the required and desirable qualifications we described above.

Questions:

For questions about this recruitment, assistance in the application process, or to request reasonable accommodation in the application process, please email Leila Vandiver at TalentAcquisition@ofm.wa.gov. For TTY service, please call the Washington Relay Service at 7-1-1 or 1-800-833-6388.

The Office of the Financial Management is an equal opportunity employer. We strive to create a working environment that includes and respects cultural, racial, ethnic, sexual orientation and gender identity diversity. Women, racial and ethnic minorities, persons of disability, persons over 40 years of age, and disabled and Vietnam-era veterans are encouraged to apply.