Search for Principal Information Security Engineer roles in St. Paul, MN, ideally in a government or public sector agency, with a focus on cybersecurity, requiring at least 5 years of experience, and offering telework options.

Okay, I've searched for Principal Information Security Engineer roles in St. Paul, MN, specifically targeting the government and public sector, with a focus on cybersecurity, requiring at least 5 years of experience, and including telework options. I found 75 positions that match your criteria.

Principal Information Security Engineer

St. Paul, MN

Government

5 years + Experience

Telework

Can you help me to analyze the job description and company culture?

Sure. Here's the analysis:

Job Analysis:

The Principal Information Security Engineer at Minnesota IT Services (MNIT) is fundamentally tasked with leading the development and maintenance of cybersecurity protocols that safeguard sensitive information across executive branch agencies. This role encompasses a comprehensive set of responsibilities, including implementing security frameworks, conducting risk assessments, and establishing security policies. The candidate will need to engage in cross-functional collaboration, driving initiatives that require not only technical proficiency but also strong communication and project management skills. Challenges may arise in navigating the diverse technological landscape of government systems, handling multi-platform security needs, and ensuring adherence to various regulatory standards. Success in this role will be characterized by a proactive approach to risk management and the ability to translate cybersecurity strategies into concrete, actionable plans that enhance the state's information security posture.

Company Analysis:

Minnesota IT Services operates as the information technology agency for the State of Minnesota, tasked with establishing IT strategies and policies for multiple state agencies. The company reflects a commitment to public service, equity, and inclusion. Its culture emphasizes collaboration, agility, and innovation within a structured governmental framework. Given this backdrop, the role of Principal Information Security Engineer is positioned as a linchpin in the enterprise security team, engaging with various stakeholders and demanding adept navigation of the organizational landscape. The role is strategically aligned with the state's goals to digitalize and enhance service delivery while ensuring compliance with security regulations. Given that MNIT supports over 2,000 applications, the impact of the PISE's work will resonate across numerous agencies, making this position not only crucial for cybersecurity but also for enhancing the overall operational security of the state’s IT infrastructure.

Mock up some interview questions based on the job description.

Absolutely. Here are some mock interview questions that could come up:

Behavioral Questions: Tell me about a time when you had to manage a project with multiple stakeholders. How did you ensure effective communication and alignment among them?
Behavioral Questions: Can you describe an experience where you faced a significant cybersecurity threat? How did you respond and what was the outcome?
Behavioral Questions: Share an example of when you had to implement new policies or standards. What challenges did you face and how did you overcome them?
Behavioral Questions: Describe a time when you had to educate stakeholders about information security risks. What approach did you take to convey your message effectively?
Technical/Role-Specific Questions: Can you walk us through your experience with implementing NIST cybersecurity controls? What specific frameworks have you utilized?
Technical/Role-Specific Questions: What steps would you take to assess vulnerability in a new SaaS solution before deployment?
Technical/Role-Specific Questions: How do you stay current with evolving cybersecurity trends and regulations that impact state and local governments?
Technical/Role-Specific Questions: Explain your approach to vendor risk management, particularly in a multi-vendor environment.
Situational Questions: Imagine you discover a potential security breach in a critical government system. What immediate actions would you take to address the issue?
Situational Questions: You are tasked with delivering a security strategy across diverse technology platforms. How would you prioritize and implement this strategy?
Company Fit/Motivation Questions: What interests you about working with Minnesota IT Services and how do you see your role contributing to its mission?
Company Fit/Motivation Questions: How do you align your professional values with the commitment to equity and inclusion at MNIT?
Questions for the Candidate to Ask the Interviewer: Can you describe the structure of the enterprise security team and how this role collaborates with other departments?
Questions for the Candidate to Ask the Interviewer: What are some current initiatives within MNIT that this role would directly impact?
Questions for the Candidate to Ask the Interviewer: How does MNIT measure the success of its security initiatives?

Job Details

Overview Company

Principal Information Security Engineer

$39.14/h-$66.92/h

Minnesota IT Services

7 days ago

Highlight

HybridFull-time5+ yearsSenior

Summary

Minnesota IT Services is seeking a Principal Information Security Engineer - ITS5 to join their team in St. Paul, MN. The role involves leading cybersecurity risk management and engineering efforts within the environmental lines of business across executive branch agencies.

About the Role

As a Principal Information Security Engineer, you will lead the development and maintenance of cyber policies, procedures, and standards, assess security risks, design control frameworks, and ensure security best practices are embedded into new government systems and services. You will collaborate with agency stakeholders and technical teams to drive enterprise-wide security initiatives, contribute to policy development, and support risk measurement and reporting efforts.

About You

Required:

Minimum of five (5) years of IT related experience in information security risk management, secure systems architecture, and the implementation of enterprise cybersecurity controls across diverse technology platforms.
Experience leading the assessment and secure implementation of SaaS solutions in a multi-platform environment.
Experience with vendor risk management, system architecture, and security operations.
Experience implementing and/or auditing against established information security standards (e.g., NIST, ISO 27001, COBIT, ITIL).
Deep technical knowledge of security practices related to networking, firewalls, and operating systems, with demonstrated application in regulatory compliance context (e.g., HIPAA, CJIS, FTI, PCI).
Ability to deliver effective verbal or written messages that facilitate a mutual understanding on both parties.
Customer service skills that include active listening, empathy, and problem-solving.

Preferred:

Familiarity with federal, state, and local regulations pertaining to information security and privacy.
Experience designing or managing cross-system relational structures within enterprise environments.
Experience with directory services and identity management systems, including LDAP and Active Directory.
Experience conducting network, platform, and application security assessments and vulnerability testing using industry tools and best practices.
Applied understanding of information security principles and theories, particularly within risk management or incident response contexts.
Relevant certification such as CISSP, CEH, GSEC, CISM, ITIL, or equivalent.
Experience working across mainframe, midrange, and/or LAN/server environments, including knowledge of security mechanism and system analysis.

Benefits

Paid vacation and sick leave
12 paid holidays each year
Low-cost medical, dental, vision, and prescription drug plans
Fertility care, including IVF
Diabetes care
Dental and orthodontic care for adults and children
6 weeks paid leave for parents of newborn or newly adopted children
Pension plan that provides income when you retire (after working at least three years)
Employer paid life insurance to provide support for your family in the event of death
Short-term and long-term disability insurance that can provide income if you are unable to work due to illness or injury
Tax-free expense accounts for health, dental, and dependent care
Resources that provide support and promote physical, emotional, social, and financial well-being
Training, classes, and professional development
Tuition reimbursement
Federal Public Service Loan Forgiveness Program

Minnesota IT Services

Minnesota IT Services (MNIT), led by Minnesota’s Chief Information Officer, is the Information Technology (IT) agency for Minnesota’s executive branch, providing the full range of IT services to over 70 agencies, boards, and commissions. MNIT also makes available a subset of services to other Minnesota government entities and education institutions.

MNIT sets IT strategy, direction, policies and standards for the State. We manage over 2,000 distinct applications, both citizen-facing and back-office. We build, maintain and secure the State’s IT infrastructure. We successfully deliver a wide range of IT projects every year for our agency customers, and we support the State’s online services for Minnesota’s citizens.

*Disclaimer: Neither the State of Minnesota, nor any agency, officer, or employee of the State of Minnesota warrants the accuracy, reliability or timeliness of any information published by this system, nor endorses any content, viewpoints, products, or services linked from this system, and shall not be held liable for any losses caused by reliance on the accuracy, reliability or timeliness of such information. Portions of such information may be incorrect or not current. Any person or entity that relies on any information obtained from this system does so at his or her own risk.

St Paul, MN