_

Note:  Submission deadline is 9/17/2021

RQ13

Location:  The primary work location(s) will be at Remote.

Duration:  Services are expected to start 10/11/2021 and are expected to complete by 10/11/2022.  This service may be amended, renewed, and/or extended.

Texas Department of Information Resources requires the services of 1 IT Auditor 2, hereafter referred to as Candidate(s), who meets the general qualifications of IT Auditor 2, Security and the specifications outlined in this document for the Texas Department of Information Resources.

_

Major concentration as an Information Risk Analyst, but not limited to:

• Review and score Texas Risk and Authorization Management Program assessment responses
• Review third-party audits and reports (SOC 2 type 2, ISO 27xxx, CSA STAR, etc.)
• Work with cloud vendors to communicate deficiencies in assessment responses
• Manage and prioritize multiple assessments
• Communicate assessment requirements to vendors and customer organizations

Note:  Prior experience working with a State of Texas agency is desirable.

Note:  Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.

• 4 Yrs Required: Conducting risk assessments, developing POA&Ms, facilitating/coordinating with information owners and custodians
• 2 Yrs Required: Conducting cloud security assessments
• 2 Yrs Required: Developing/Reviewing information security policies and procedures
• 2 Yrs Preferred: Coordinating or conducting IT security audits
• 2 Yrs Preferred: Identifying, reviewing, and prioritizing vulnerabilities and remediation efforts
• 2 Yrs Preferred: Data analysis