Information Security SpecialistDevelops, implements, and maintains Countywide security standards, guidelines, policies, and procedures based on best practices and compliance requirements; recommends security enhancements; ensures ongoing security compliance and prevents the unauthorized use, release, modification, or destruction of data; oversees the development of risk programs to achieve required risk tolerance levels; assists departments to establish appropriate risk levels; designs secure business processes in conjunction with County departments, based upon defined risk tolerance levels; works with the security engineers to schedule testing of systems (scans, system test and evaluation) and examines active monitoring to ensure controls are in place and are effective; evaluates security incidents, develops solutions, and communicates results to technical staff and management; collaborates with the department IT managers outside of the Technology Services and Solutions to ensure information security and privacy risks are identified, documented and addressed in a timely manner; tracks corrective action plans; provides consulting, training, and security awareness services to other departments to effectively interact with County Information Security and leverage centralized control capabilities within their operating environment; conducts information security risk assessments within the Technology Services and Solutions and on an enterprise-wide basis; conducts periodic departmental security audits; identifies noncompliance and recommends corrective actions to comply with Federal regulations and County policy; advises management of risks and best security practices; prepares status reports for managers regarding compliance issues and provides regulatory updates; enforces information security standards, guidelines, policies, and procedures; leads key cross-functional efforts to assess and improve the control environment or ensure regulatory compliance; assesses the impact of external actions on computer systems and networks and determines whether the County has been subjected to a system failure, a computer related crime, or potentially hostile information warfare; conducts security research to stay abreast of security issues and industry trends.