Salary
$34.05 - $54.48 Hourly
$70,826 - $113,321 Annually
This position is a Pay Band IE
Posting Details
This job posting may be used to fill multiple vacancies.
Interviews are anticipated to be conducted within two weeks of closing date.
The New Mexico Health Care Authority (HCA) is a state agency that provides comprehensive, accessible, and high-quality health care services to New Mexico residents. The agency is responsible for managing key services such as Medicaid, SNAP, TANF, and LIHEAP, ensuring uninterrupted support and care for New Mexicans.
Our Vision
- Every New Mexican has access to affordable health care coverage through a coordinated and seamless health care system.
Our Mission
- We ensure that New Mexicans attain their highest level of health by providing whole-person, cost-effective, accessible, and high-quality health care and safety-net services.
Our Goals
- Leverage purchasing power and partnerships to create innovative policies and models of comprehensive health care coverage that improve the health and well-being of New Mexicans and the workforce.
- Achieve health equity by addressing poverty, discrimination, and lack of resources, building a New Mexico where everyone thrives.
- Implement innovative technology and data-driven decision-making to provide unparalleled, convenient access to services and information.
- Build the best team in state government by supporting employees' continuous growth and wellness.
Why does the job exist?
The IT Security and Compliance Administrator II will:
- Monitor the HCA's cybersecurity governance and compliance;
- Ensure information security and compliance with relevant legislation, legal interpretation, compliance and regulatory standards;
- Perform security audits and provides management with status reports;
- Develop plans and requirements for disaster and incident response;
- Under general supervision, perform all procedures necessary to ensure the safety of information systems and technology assets and data and to protect systems from intentional or inadvertent access or destruction.
How does it get done?
The IT Security and Compliance Administrator II is responsible for:
- Developing cybersecurity governance policies, procedures, standards and guidelines;
- Performing audits to ensure that users are adhering to the necessary procedures and processes to maintain IT security and compliance;
- Monitoring compliance with security policies, standards, guidelines and procedures;
- Coordinating and collaborating with compliance/regulatory auditors during formal audits
- Collaborating with third party security agencies or companies in performing security assessments;
- Providing input into the development, review, and implementation of enterprise-wide security policies, procedures, and standards to meet compliance responsibilities;
- Participating with team(s) to gather a full understanding of project scope and business requirements.
Who are the customers?
- The Health Care Authority (HCA) and other State Agencies.
Ideal Candidate
The ideal candidate has:
- A Bachelor's Degree in Management Information Systems (MIS), Information Technology, Engineering or similar technical degree;
- Two (2) years of experience in IT security or compliance validation;
- Cybersecurity certifications, (e.g. CISSP, CISA, CISM, CASP+, CISMI).
Minimum Qualification
Bachelor's degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and two (2) years of experience in IT security or compliance validation (e.g. HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling six (6) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g. CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g. PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience.
Employment Requirements
Must possess and maintain a valid Driver's License.
Working Conditions
Work is performed in an office setting with exposure to Visual/Video Display Terminal (VDT) and extensive phone and personal computer usage. Direct client interaction and some travel may be required.
Supplemental Information
Do you know what Total Compensation is? Click here
Agency Contact Information: Alex Rodriguez, (505) 538-5184. Email
For information on Statutory Requirements for this position, click the Classification Description link on the job advertisement.
Bargaining Unit Position
This position is not covered by a collective bargaining agreement.
Read Full Description