Skip to main contentA logo with &quat;the muse&quat; in dark blue text.
Portland Public Schools

Information Security Analyst - 1.0 FTE - Office of Technology & Information Services

Portland, OR

Posting Timeline

PPS strongly encourages and recommends everyone who is able, to be vaccinated and remain current on the COVID-19 vaccine.

This job is open until filled. Applications will be reviewed as received. Portland Public Schools reserves the right to make a hiring decision at any point during the posting period.

Position Details

Portland Public Schools (PPS) is seeking talented people from diverse backgrounds and experiences to lead change and inspire PPS students. At PPS, every employee, despite having different roles, is an educator. We hope to attract talented educators who model the core PPS Educator Essentials. With the District's focus on eliminating systemic racism and its adverse impact on student learning, we seek to hire individuals who bring to our district a deep commitment to racial equity and social justice. To learn more about Portland Public Schools, please visit the District website: here.

Want more jobs like this?

Get Administration and Office jobs in Portland, OR delivered to your inbox every week.

By signing up, you agree to our Terms of Service & Privacy Policy.


BASIC FUNCTION:

We are seeking a strong security technology expert to join us as our Information Security Analyst. This position will be part of Portland Public Schools information technology team, reporting to the Manager of Information Security Operations. The Information Security Analyst is responsible for implementing and supporting the information security strategy for Portland Public Schools including recommending security enhancements to the Information Security Operations team and safeguarding computer systems and networks.

ROLES AND RESPONSIBILITIES:
  • Assist with cybersecurity tickets and requests submitted via ticketing system.
  • Monitor, investigate, and respond to security system detections and network anomalies.
  • Perform, monitor, and review vulnerability assessments and provide actionable guidance for remediation efforts.
  • Develop, maintain, and execute Portland Public Schools security standards, procedures, and playbooks by leveraging defense-in-depth methodology, .
  • Provide subject matter expertise on enterprise cybersecurity risks, threats, technologies, and potential impact.
  • Develop and provide up-to-date security best practice recommendations to internal technical teams and other partners
  • Continually monitor against authorized security control requirements and report system risks and application configurations or vulnerabilities.
  • Contribute to a cyber-program focused on support, collaboration, partnership, and ingenuity.
  • Ensure all information technology systems, policies and procedures fully comply with applicable laws, standards, and regulations; recommend and implement changes as necessary.
  • Monitor and evaluate security measures to protect against reasonably anticipated threats or hazards to the confidentiality, integrity, and availability of all applicable data.
  • Create and deliver effective security and compliance training for district staff.
  • Demonstrate a commitment to the Portland Public Schools Racial Equity and Social Justice Commitment by developing a thorough knowledge and application of the district Racial Educational Equity Policy, the PPS RESJ Framework and Plan, and the PPS RESJ Partnerships Investment Strategy and other board policies; participate in staff development, in-services and trainings related to diversity, equity and inclusion in the workplace and in K - 12 education; model appropriate behaviors; develop, recommend and implement improvements to educational practices with awareness and understanding of their impact in a racially and culturally diverse community.
  • Perform related duties as assigned.

KNOWLEDGE AND ABILITIES:

Knowledge of:
  • Linux, Windows, Apple MacOS and iOS operating systems.
  • Disaster recovery strategies.
  • Asset, identity, and software lifecycle management
  • Risk and vulnerability management.
  • Risk-based assessment methodologies.
  • Networking concepts and analysis (TCP/UDP, 802.11, tcpdump/tshark).
  • Log aggregation and event correlation (netmon, SIEM, syslog).
  • Security software systems administration (EDR, SIEM, IDSIPS, content filtering, packet inspection).
  • Enterprise systems baselining, hardening, and configuration management (VMware, Windows Server, InTune, JAMF, AWS).
  • Security frameworks such as CIS Controls, NIST SP-800 (or NIST CSF) and the MITRE ATT&CK Framework.
  • Relevant legal and regulatory requirements, such as Payment Card Industry/Data Security Standard (PCI), Family Educational Rights and Privacy Act (FERPA), Children Internet Protection Act (CIPA), and Health Insurance Portability and Privacy Act (HIPAA).
  • Oral and written communication skills.
  • Interpersonal skills using tact, patience and courtesy; techniques and principles of high-quality customer service.
  • IT concepts, basic operating principles of computer hardware and software technical support functions; network, database and cloud-based technologies and related hardware and software applications.
  • Operations, capabilities and limitations of computer equipment.

Ability to:
  • Collaborate and communicate effectively with online productivity suites.
  • Create clear, concise and accurate technical documentation.
  • Think critically about a problem, approach from multiple perspectives and adopt an effective course of action.
  • Maintain current knowledge of technological advances in the field.
  • Communicate effectively both orally and in writing.

EDUCATION AND EXPERIENCE:

Education: Bachelor's degree from an accredited college or university, with a major in computer science, information science, information technology, information assurance, or a related field.

Experience: A minimum of five (5) years of progressive experience working with information technology enterprise systems, software, network protocols, and information security.

A current Information Security certification (e.g., CISSP, CISSLP, GIAC, CISA, etc.) is desired.

Any other combination of education and experience that would likely provide the required knowledge and abilities may be considered.

SPECIAL REQUIREMENTS:

Work hours may include on- and off-campus evening and weekend activities and meetings and district, school and student functions.

May participate in rotating on-call shift work to respond to issues that occur beyond the traditional work day.

WORKING CONDITIONS:

The conditions herein are representative of those that must be met by an employee to successfully perform the essential functions of this job. Persons with certain disabilities may be capable of performing the essential duties of this class with or without reasonable accommodation, depending on the nature of the disability.

Work Environment: Work is performed primarily in a standard office environment with occasional visits to District sites. Work hours may include on- and off-campus evening and weekend activities, meetings and district, school and student functions.

Hazards: Potential conflict situations.

Physical Demands: Primary functions require sufficient physical ability and mobility to work in an office setting; dexterity of hands and fingers to operate a computer keyboard and other office equipment; sitting or standing for extended periods of time; kneeling, bending at the waist, reaching overhead, above the shoulders and horizontally to retrieve and store files and supplies; lifting, pushing, pulling and carrying office equipment, supplies and materials weighing up to 25 pounds; repetitive hand movement and fine coordination to use a computer keyboard; hearing and speaking to exchange information in person or on the telephone; seeing to read, prepare and assure the accuracy of documents.

Remote Work Eligibility: full-time remote work within the Portland-Salem metropolitan area.

CLASSIFICATION AND SALARY:

This position is classified as Information Security Analyst, Pay Grade 38, on the Non-Represented, Confidential, Professional and Management Employees salary schedule FLSA Exempt.

The Non-Represented Confidential Professional Management and Employees Salary Schedule for 260 day employees can be found here.

SALARY RANGE: $105,964 - $126,527

This position is a 260 day work year.

Benefits Information

Portland Public Schools (PPS) offers several competitive and comprehensive benefit packages to employees. Fringe benefits include medical, dental, vision, prescription, life and disability insurance, employee assistance program, 403(b) retirement savings plan and various leave and professional development programs. Depending on the insurance option selected by the employee, there may be an employee contribution toward insurance.

Portland Public Schools is a public employer and participates in the Public Employees Retirement System (PERS/OPSRP). Eligible employees are required by statute to contribute 6% of salary on a pre-tax basis to OPSRP/IAP, after serving six months under a PERS employer.

For more information about additional benefits or compensation options by employee group, please visit our website at: https://www.pps.net/Page/1635

Client-provided location(s): Portland, OR, USA
Job ID: portland_public_schools-27305
Employment Type: Other

Perks and Benefits

  • Health and Wellness

    • Health Insurance
    • Dental Insurance
    • Vision Insurance
    • FSA
    • HSA
    • Life Insurance
    • Short-Term Disability
    • Long-Term Disability
  • Parental Benefits

    • Birth Parent or Maternity Leave
    • Non-Birth Parent or Paternity Leave
  • Work Flexibility

    • Remote Work Opportunities
  • Office Life and Perks

    • Casual Dress
  • Vacation and Time Off

    • Paid Vacation
    • Paid Holidays
    • Personal/Sick Days
    • Leave of Absence
  • Financial and Retirement

    • 401(K)
    • Pension
    • Relocation Assistance
  • Professional Development

    • Tuition Reimbursement
    • Learning and Development Stipend
    • Promote From Within
    • Mentor Program
    • Shadowing Opportunities
    • Access to Online Courses
  • Diversity and Inclusion

    • Diversity, Equity, and Inclusion Program
    • Latinx founded/led