Process & System Analysis: Analyze, document, and validate security processes, system requirements, and interagency interactions related to retirement benefits administration.
Cross-Functional Collaboration: Partner with program offices, technical teams, and subject matter experts (SMEs) to define and refine security and compliance requirements for system enhancements, policy changes, and state initiatives.
Documentation & Standards: Create and maintain audit-ready documentation, including security specifications, user stories, workflows, and use cases aligned with public sector standards.
Solution Design & Testing: Support solution design and actively participate in testing phases (e.g., UAT) to verify proper implementation of security controls and compliance requirements.
Continuous Improvement: Recommend improvements to strengthen the security posture, boost process efficiency, and ensure program accountability and service quality.
Project Governance: Monitor deliverables, timelines, and milestones to guarantee alignment with organizational security goals, state mandates, and governance frameworks.
Training & Education: Assist in developing training materials and delivering security and compliance education to program staff and stakeholders.
Impact & Gap Analysis: Conduct gap analyses and assess the operational and security impacts of legislative, regulatory, or policy changes.
Data-Driven Monitoring: Perform data analysis and generate comprehensive reports to support compliance monitoring, performance evaluation, risk tracking, and decision-making.
Best Practice Advocacy: Provide guidance and informal leadership to cross-functional teams, championing industry best practices in security, compliance, and risk management.
Stakeholder Alignment: Lead strategic discussions with program offices, tech partners, and stakeholders to align on security objectives, policy interpretations, and compliance expectations.
Mentorship: Serve as a mentor to junior analysts, offering support in interpreting security frameworks, documenting requirements, and navigating governance processes.
Culture Champion: Foster a culture of security awareness, continuous improvement, and open communication regarding risks and compliant behaviors.
Initiative Ownership: Take ownership of key security and compliance initiatives, driving progress and ensuring deliverables meet rigorous regulatory standards.
Incident & Audit Leadership: Provide leadership during security incidents, compliance reviews, and audit activities by coordinating responses and supplying accurate analysis.
Audits & Reviews: Execute tasks supporting internal and external security and standards reviews.
Risk Mitigation: Perform security risk assessments and formulate actionable mitigation strategies.
