Data Security Consultant and Local Agency Security Officer (LASO)

St Paul, MN, United States

Genesis10 is seeking a Data Security Consultant and Local Agency Security Officer (LASO) for a contract with our client in St. Paul, MN. 100% Remote. Key Responsibilities: Assist with evaluation of architecture interfacing with other state/federal/local systems. Assist with assessing the security of any equipment needed. Assist with the evaluation of data integrity and data security. Assist with ensuring all background check compliance is met for all project team members. Assist with creating procedures to ensure the proper access rights are granted. Assist in building User Acceptance Testing (UAT) scenarios to ensure security requirements are properly tested and documented. Assist with architecture reviews of all environments. Assist with the evaluation and testing of disaster recovery plans. Assist with the development of change management processes and procedure projects. Provide written documentation and recommendations. Review agency network diagrams and access control lists (ACL) for compliance with FBI CJIS Security Policy and BCA CJDN Security Policy. Work with staff, review IT security audit documentation from local agencies which access DVS systems and data to determine compliance with FBI CJIS Security Policy and BCA CJDN Security Policy requirements. Provide technical guidance, principles, standards, and best practices to guide criminal justice agency infrastructure design and system implementations to comply with FBI CJIS Security Policy and BCA CJDN Security Policy. Perform technical analysis of vendor solutions to assess compliance with FBI CJIS Security Policy and BCA CJDN Security Policy. Audit identity and access management to assure they are properly managed and maintained for all systems utilized to access driver's license and motor vehicle registration data; and recommend remedial action when required. Audit the driver's license and motor vehicle systems for PCI compliance; and recommend remedial action when required. Work with agencies and other government entities to ensure driver and vehicle data is accessible for utilization for mission critical functions while maintaining all security requirements. Access public government data to the extent allowable by law, including data in the State's possession that would otherwise be classified as not public under Minnesota Statutes section 13.82. Analyze security needs for all projects, systems, and systems that interface with client systems. Transition and train new security staff for duties including: Deputy Registrar Security Identity Access Management (AIM) PCI Compliance Policy Auditing Client securities and LASO duties Securities duties will include: Deputy Registrar Security IAM PCI Compliance Policy Auditing Physical Security of Facilities Fraud and Investigations ADLMV Management Technical Review/Architect The LASO duties will include: Identify who is using the CSA approved hardware, software, and firmware and ensure no unauthorized individuals or processes have access to the same. Identify and document how the equipment is connected to the state system. Ensure that personnel security screening procedures are being followed as stated in FBI CJIS Security Policy and the MNJIS 5002 policy Ensure the approved and appropriate security measures are in place and working as expected. Support policy compliance and ensure the CSA ISO is promptly informed of security incidents. Conduct an annual audit of CJIS compliance and track remediation efforts on any items found Maintaining CJIS compliant network architecture Properly vetting all individuals with access to DVS physical and logical resources through the access control systems and best IAM practices Properly vetting all software and hardware vendors for CJIS compliance Working closely with client to utilize enterprise resources when possible and involving client on all technical projects Active involvement in all data access requests that may contain CJI to ensure CJI is protected accordingly Work through v ndor agreements to ensure all security requirements are met or exceeded Reviewing client scans of resources and monitoring identified vulnerabilities and remediation efforts Provide knowledge transfer. Required Basic Qualifications: Six (6) years' experience in a security architect or engineer role. Three (3) years' experience in network engineering, including firewall management. Four (4) or more engagements, within the last ten (10) years, in a security architect or engineer role where the engagement was longer than three months each. Experience with the design and implementation of information systems, in organizations with more than 50 people, with an emphasis on data, network, and infrastructure security. CISSP or GIAC certification. Comprehensive knowledge of hardware, software, application, and systems engineering. Broad knowledge of database systems, web-based technologies, and network security. Systems thinking - the ability to see how parts interact with the whole ( "big picture" thinking). Knowledge of IT governance and operations. Interpersonal and leadership skills - servant leadership, collaboration, facilitation, and negotiation skills. Communication skills - both written and verbal. Compensation: Hourly W2 pay rate $ We have access to additional contract, contract-to-hire, and direct hire positions with various rate ranges. If you have the described qualifications and are interested in this exciting opportunity, apply today! Ranked a Top Staffing Firm in the U.S. by Staffing Industry Analysts for six consecutive years, Genesis10 puts thousands of consultants and employees to work across the United States every year in contract, contract-for-hire, and permanent placement roles. With more than 300 active clients, Genesis10 provides access to many of the Fortune 100 firms and a variety of mid-market organizations across the full spectrum of industry verticals. For contract roles, Genesis10 offers the benefits listed below. If this is a perm-placement opportunity, our recruiter can talk you through the unique benefits offered for that particular client. Benefits of Working with Genesis10: Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years. The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years. Access to an experienced, caring recruiting team (more than 7 years of experience, on average.) Behavioral Health Platform Medical, Dental, Vision Health Savings Account Voluntary Hospital Indemnity (Critical Illness & Accident) Voluntary Term Life Insurance 401K Sick Pay (for applicable states/municipalities) Commuter Benefits (Dallas, NYC, SF) Remote opportunities available For multiple years running, Genesis10 has been recognized as a Top Staffing Firm in the U.S., as a Best Company for Work-Life Balance, as a Best Company for Career Growth, for Diversity, and for Leadership, amongst others. To learn more and to view all our available career opportunities, please visit us at our website. Genesis10 is an Equal Opportunity Employer. Candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Genesis10 is an Equal Opportunity Employer/Minorities/Female/Disabled/Veteran