INFORMATION SECURITY ANALYST-JUNIOR - 09232026- 81219

State of Tennessee Job Information

LOCATION OF (1) POSITION(S) TO BE FILLED: DEPARTMENT OF FINANCE & ADMINISTRATION, DAVIDSON COUNTY

This position is designed as Hybrid (In office and Remote).

This position requires a criminal background check and CJIS fingerprints. Therefore, you may be required to provide information about your criminal history to be considered for this position.

Education and Experience: Bachelor's degree and one year of experience in information security, risk analysis, or cybersecurity policy implementation.

Substitution of Graduate Coursework: Graduate coursework in information security may substitute for one year of experience.

Substitution of Experience for Education: Experience in cybersecurity or incident response may substitute for education up to four years.

Under direction, the Information Security Analyst-Junior supports organizational cybersecurity through security monitoring, risk analysis, policy compliance, and security awareness initiatives. This role assists with security audits, incident response, and the implementation of risk mitigation strategies for IT systems and applications. This class differs from that of Information Security Analyst-Senior in that incumbents of the latter are responsible for directing and leading security policy promulgation, risk analysis, safeguard and compliance efforts, and incident response and have responsibility for supervising subordinate employees.
 

1. Experience supporting mission-critical public safety systems
2. Cybersecurity policy compliance
3. Cloud, infrastructure, endpoint, or application SECURITY support experience preferred
4. ServiceNow or similar ITSM experience

Competencies:

1. Tech Savvy
2. Customer Focus
3. Manages Complexity 
4. Optimizes Work Processes 
5. Strategic Mindset

Knowledges:

1. Information security best practices
2. Risk assessment and audit techniques
3. Cybersecurity tools and defense strategies
4. Regulatory and compliance frameworks
5. Incident response and recovery procedures

Skills:

1. System monitoring and vulnerability detection
2. Policy review and documentation
3. Communication and training
4. Troubleshooting and diagnostics
5. Secure system configuration and testing

Abilities:

1. Detect and escalate security issues
2. Communicate risk information clearly
3. Prioritize multiple tasks during incidents
4. Adapt to evolving threat landscapes
5. Collaborate across technical and non-technical teams

1. Security Information and Event Management (SIEM) Tools
2. Vulnerability Scanners
3. Endpoint Protection Platforms
4. Encryption and Authentication Tools
5. Standard Office Software