Information Security Specialist

Full Job Description

This vacancy is with the Information Services department. The eligibility list created by this vacancy may be used to hire other vacancies in the department or County.

We are seeking an experienced Information Security Specialist to help protect and strengthen the County’s enterprise security posture through hands-on technical expertise and strategic collaboration.

The ideal candidate will have practical experience administering and responding to threats using tools such as CrowdStrike, Proofpoint, Palo Alto firewalls, Entra ID, Azure Security services, and Cisco ISE, with a strong foundation in IAM fundamentals and access control design.

This role partners closely with IT and business stakeholders to assess risk, monitor security controls, respond to incidents, and ensure compliance across complex environments.

Candidates holding or pursuing industry-recognized certifications such as Security+, AZ-500, or CCNA Cyber are strongly preferred

The Information Security Specialist is a high-level technical expert in the security domain and assumes an advanced technical role ensuring the County’s information assets are adequately protected against internal and external threats.

This position participates in the planning, design, and implementation of enterprise-wide information security systems, and making recommendations, modifications, and additions to current policies, procedures and guiding practices implemented across the County; and to perform related duties as assigned.

To view or print a copy of the complete Ramsey County job (class) description for this position, go to: Job Descriptions. Once at this page, you can browse the alphabetical list or search for a job description.

Flexible Workplace:
This position is identified under the designation of ‘flex work eligible’, meaning that the employee can formally opt to be in-office full-time or work a flex schedule in which at least two-days per week are performed in office and other days can be performed in a remote-first environment. Regardless of selection, the position carries expectations regarding on-site responsibilities and will require schedule flexibility beyond the minimum expectations set forth in the county’s flexible workplace policy. To view Ramsey County’s Flexible Workplace policy, go to: Flexible Workplace Policy

Requirements

1. Perform information security reviews with project teams to design, implement and document systems and processes to ensure they provide the County with appropriate information security controls, and mitigation of risk.
2. Analyze, document, and respond to security violations, identify trends or exposures and make recommendations to eliminate security threats.
3. Identify, evaluate, and report on information security risks in a manner that meets compliance and regulatory requirements.
4. Utilize and perform monitoring of security and risk management tools.
5. Serve as a technical subject matter resource providing expertise in the security domain and provide technical direction and lead work on security related projects.
6. Research and stay abreast of potential information security threats, industry trends, emerging technologies, and response alternatives; participate as a team member in proactively mitigating their impact.
7. Run security reports to provide metrics to support decisions.
8. Protect systems by defining access privileges are appropriate based on job role, control structures, and resources.
9. Participate in the assessment of potential threats and risks to County systems and the management of those risks.
10. Collaborate on critical IT projects to ensure that security issues are addressed throughout the project life cycle.
11. Assist in the review, implementation, and enforcement of county-wide information security policy, procedures and standards consistent with state statute and federal law.
12. Provide input into the evaluation of County security needs to determine appropriateness, compatibility, and potential issues.
13. Work in an advisory role in application development or acquisition projects to assess security requirements and controls to ensure that security controls are implemented as planned.
14. Evaluate alternative solutions to achieve client objectives and provide recommendations for appropriate security controls.
15. Provide individual or group instruction to both technical and departmental customers as needed on security threats and vulnerabilities; draft guidance documents to mitigate threats and vulnerabilities.
16. Perform other duties as assigned.

(The work assigned to a position in this classification may not include all possible tasks in this description and does not limit the assignment of any additional tasks in this classification. Regular attendance according to the position’s management approved work schedule is required.)

ESSENTIAL FUNCTIONS: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 13, 15. 

Qualifications

Education: Bachelor’s degree in Management Information Systems, Computer Science, or a related field. 

Experience: Five years of progressive experience in an information security role.

Substitution: Equivalent combination of education and related experience.

Certifications/Licensure: None. 

Additional Information

The examination for Information Security Specialist will consist of a training and experience rating, comprised of the questions in the attached supplemental questionnaire.

Not all applicants who meet the minimum qualifications will pass the training and experience rating.

The rating on this supplemental questionnaire will depend on your answers to the questions –do not mark “see resume” or “see work history” as a response.

Please answer all your questions clearly and completely.

Failure to respond could affect your score and final rank on this examination.Eligible List: The names of all applicants who filed a properly completed application and passed the examination/screening process shall be placed on the eligible list for an employment opportunity as an Information Security Specialist.

This list will be certified to the appointing authority which may use this list to conduct interviews to fill a vacancy.

Candidates will remain on the list for 30 days or until hired, whichever occurs first. A notice will be sent to applicants at the time the eligible list is posted.

Veteran's Preference: This is a classified position requiring an open, competitive selection process. Veteran's Preference points will be applied after a candidate passes the examination process.

Applicants who are eligible for veteran's preference should update their veteran's DD214, and other supporting documents, and submit them as an attachment at the time of application.

Criminal Background Checks: All employment offers are conditioned upon the applicant passing a criminal background check. Convictions are not an automatic bar to employment.

Each case is considered on its individual merits and the type of work sought.

However, making false statements or withholding information will cause you to be barred from employment, or removed from employment.E-Verify Participation: Ramsey County participates in the federal E-Verify program.

This means that Ramsey County will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee's Form I-9 to confirm work authorization.

If the Government cannot confirm that you are authorized to work, Ramsey County is required to give you written instructions and an opportunity to contact DHS and/or the SSA before taking adverse action against you, including terminating your employment.

Employers may not use E-Verify to pre-screen job applicants and may not limit or influence the choice of documents you present for use on the Form I-9.

Equal Opportunity Employer: Ramsey County provides equal access to employment, programs, and services without regard to race, color, creed, religion, age, sex (except when sex is a Bona Fide Occupational Qualification), disability, familial or marital status, sexual orientation or gender identity, public assistance status, place of residence, political affiliation, or national origin.

Ramsey County is deeply committed to advancing racial equity and promoting diversity and inclusion within all areas of its workforce.

The county strives being equitable, inclusive, transparent, respectful, and impactful in how we serve and engage with residents, as well as Ramsey County employees.

Advancing racial equity ensures all people who need access to opportunities and services we provide, will receive them.

Racial equity is achieved when race can no longer be used to predict life outcomes, and outcomes for all are improved.To print a paper application for this posting click Paper Application You will need to print this posting and answer the supplemental questions associated with this exam and submit them with your completed paper application.For further information regarding this posting, please contact: Crystal.Diaz@co.ramsey.mn.us