IT Security & Compliance Adminstrator I

$29.66 - $47.46 Hourly

$61,700 - $98,720 Annually

This position is a Pay Band ID

Posting Details

The Gaming Control Board is a regulatory agency of the State of New Mexico. Its mission is to uphold the integrity, transparency and fairness of gaming activities throughout the State through a combination of legal frameworks, regulations, monitoring and enforcement measures.

Interviews are anticipated to be conducted within two weeks of closing date.

Why does the job exist?

The IT Security and Compliance Administrator I ensures the safety of Gaming Control Board information systems, technology assets, and protects systems from intentional or inadvertent access or destruction. This position also performs critical duties for risk and vulnerability management, threat assessments, incident mitigation and response, compliance and user security awareness.

How does it get done?

Key responsibilities include:
* Conducting data security remediation such as security patching
* Working on multiple projects as a security team member and participating with team(s) to gather a full understanding of project scope and business requirements
* Evaluating system user access records to ensure accounts are current or terminated in a timely manner
* Performing vulnerability scans and assessments of GCB technology assets and systems to mitigate security holes in the environment
* Identifying and resolving root causes of security related problems as well as consulting with clients on security violations
* Logging and monitoring activities and provisioning resources (asset inventory and management and configuration management)
* Understanding and applying foundational security operations concepts (Need-to-know/least privileges, separation of duties and responsibilities, privileged account management and SLAs)
* Operating and maintaining detective and preventative measures (firewalls, intrusion detection and prevention systems, whitelisting/blacklisting, third-party provided sec malware)
* Providing input to the preparation of the disaster recovery (DR) plans and incident response (IR) documents and/or plans
* Working with clients to identify security requirements using methods that may include risk and impact assessments
* Following up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, internal and external audits to ensure appropriate remediation is taken
* Understanding and applying concepts of confidentiality, integrity and availability

Who are the customers?

This position supports the New Mexico Gaming Control Board employees and board members, and working with DoIT, could potentially support other small state agencies who do not have their own IT staff.

Ideal Candidate

The ideal candidate will have:
* Performed vulnerability scans with tools like Nessus, NMAP and /or Kali tools
* Strong knowledge of Cisco/HP switches, common network protocols (TCP/IP, UDP, etc.) ports and services or systems administration, network operations and end user support.
* Experience with Fortinet or other firewalls, MFA products, SIEM solutions and Identify and Access Management (IAM) tool
* Willingness to help in all IT Helpdesk and Network areas since Gaming Control Board is a small agency

Minimum Qualification

Associate's degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering or similar technical degree and two (2) years of experience in IT security, compliance validation (e.g. HIPAA, PCI) or systems administration, network operations or end user support. Substitutions Apply. See Substitution Table below. A certificate in IT security/forensics (e.g. CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g. PCIP, ASV, ISA, QSA) can be used to substitute one year of experience.

Substitution Table

These combinations of education and experience qualify you for the position:
Education Experience Education Experience 1 High School Diploma or Equivalent AND 4 years of experience OR High School Diploma or Equivalent AND 4 years of experience 2 Associate's degree in the field(s) specified in the minimum qualification AND 2 years of experience Associate's degree or higher in any field AND 4 years of experience 3 Bachelor's degree or higher in the field(s) specified in the minimum qualification AND 0 years of experience
• Education and years of experience must be related to the purpose of the position.

• If Minimum Qualification requires a specific number of "semester hours" in a field (e.g. 6 semester hours in Accounting), applicants MUST have those semester hours in order to meet the minimum qualifications. No substitutions apply for semester hours.

Employment Requirements

Selected candidate must have a driver's license and will be subject to an extensive pre-employment background check which includes fingerprinting.

New Mexico Gaming Control Board employees may not participate in any gaming activity including bingo and raffle in the State of New Mexico. This does not include State Lottery and New Mexico horse racing.

Working Conditions

Work is performed in an office setting with exposure to Visual/Video Display Terminal (VDT) and extensive personal computer and phone usage. Some sitting, standing, bending and reaching may be required. There may be some in-state travel and possible extra hours depending on duties. Employees do not work remotely.

Supplemental Information

Do you know what Total Compensation is? Click here

Agency Contact Information: Geri White (505) 3509920. Email

For information on Statutory Requirements for this position, click the Classification Description link on the job advertisement.

Bargaining Unit Position

This position is not covered by a collective bargaining agreement.