Salary: Depends on Qualifications
Location : Houston, TX
Job Type: Regular Full-time
Job Number: 17237
Department: Universal Services
Opening Date: 09/16/2026
Closing Date: 10/16/2026 11:59 PM Central
Max Number of Applicants: 100

Position Overview:

The Information Security Analyst - Governance, Risk & Compliance (GRC) performs all procedures necessary to ensure the security of information and information systems, protecting systems from intentional or inadvertent access, alteration, or destruction.
Duties and Responsibilities:

• Serve as a subject matter expert and/or provide direction on processes, projects, and issues related to Cloud Security, with emphasis on Microsoft Azure.
• Conduct security risk assessments for cloud, hybrid, and on-premise IT solutions and infrastructure.
• Utilize cloud security controls to enhance security posture and research emerging threats affecting cloud and hybrid cloud environments.
• Develop, manage, and coordinate security risk assessments for:
  
  • • Third-party vendors
    • Internally developed/managed applications and systems
    • Ensuring alignment with the Confidentiality, Integrity, and Availability (CIA) triad
• Assess and prioritize information security risk; facilitate compliance with regulatory requirements and internal security policies.
• Plan, research, and evaluate cybersecurity architecture for infrastructure projects (cloud and on-premise).
• Identify security design gaps in proposed architectures and recommend improvements.
• Lead the evaluation, design, and implementation of new security solutions and technologies.
• Develop and maintain IT security policies, standards, procedures, and guidelines, including exception management processes.
• Create policy drafts, procedures, educational content, strategy/technology roadmaps, metrics packages, RFPs/RFOs, project plans, communications, and executive-level presentations.
• Design and implement tools/processes to monitor and govern security control effectiveness.
• Maintain dashboards and reports to communicate security risks and compliance status.
• Present cybersecurity risks and remediation plans to stakeholders; track and ensure timely closure of open issues.
• Participate in ongoing updates and management of the Harris County Cybersecurity Framework and cybersecurity policies.
• Balance business needs with security priorities and communicate risk effectively to leadership.
• Evaluate and assist with the adoption of emerging security tools and solutions.
• Lead or serve as a subject matter expert on complex, multi-disciplinary security projects.
• Coach and mentor junior managerial and technical staff.
• Conduct cybersecurity training and awareness sessions as needed.
• Perform other duties as assigned.

Requirements
Education:

• Minimum: High School diploma or G.E.D. from an accredited educational institution.

Knowledge, Skills, and Abilities:

• Strong interpersonal and communication skills; able to build collaborative relationships across departments.
• Ability to analyze complex problems, assess risk, and recommend effective, business-aligned solutions.
• A self-starter with passion for cybersecurity, adaptability, and a team-oriented approach.
• Working knowledge of security regulations such as CJIS, HIPAA, PCI-DSS, and Privacy Act.
• Experience mentoring others and conducting security training sessions.

Applicants for this position will be subject to a criminal background check that includes being fingerprinted. This applies to any position with network access to Criminal Justice Information Services (CJIS) or access to an area where CJIS is received, maintained or stored either manually or electronically (i.e. custodian, maintenance).

Automatic Disqualification:

• Convictions, probation, or deferred adjudication for any Felony, and any Class A Misdemeanor
• Convictions, probation, or deferred adjudication for a Class B Misdemeanor, if within the previous 10 years
• Open arrest for any criminal offense (Felony or Misdemeanor)
• Family Violence conviction

NOTE: Qualifying education, experience, knowledge and skills must be documented on your job application. You may attach a resume to the application as supporting documentation but ONLY information stated on the application will be used for consideration. "See Resume" will not be accepted for qualifications.

Preferences

• Bachelor's degree in Information Technology, Cybersecurity, or related field.
• Experience consulting with stakeholders on security best practices, network controls, and regulatory requirements.
• Proficiency with Governance, Risk & Compliance (GRC) tools.
• Familiarity with productivity platforms such as Microsoft 365 (Word, Excel, PowerPoint, Outlook), Teams, SharePoint, QuickBase, and Power BI.

General Information
Location:

• 406 Caroline St., Houston, TX 77002

Work Arrangement:

• Hybrid

Employment may be contingent on passing a drug screen and meeting other standards.

Due to a high volume of applications positions may close prior to the advertised closing date or at the discretion of the Hiring Department.

HARRIS COUNTY EMPLOYEE BENEFITS

Harris County offers a highly competitive benefits program, featuring a comprehensive group health plan and defined benefit retirement plan.
The following benefits are offered only to Harris County employees in regular (full-time) positions:
Health & Wellness Benefits

• Medical Coverage
• Dental Coverage
• Vision Coverage
• Wellness Plan
• Life Insurance
• Long-Term Disability (LTD) Insurance
• Employee Assistance Program (EAP)
• Healthcare Flexible Spending Account
• Dependent Care Flexible Spending Account

Paid Time Off (PTO)

• Ten (10) days of vacation leave per year (accrual rate increases after 5 years of service)
• Eleven (11) County-observed holidays
• One (1) floating holiday per year
• Paid Parental Leave*
• Sick Leave

Retirement Savings Benefit

• 457 Deferred Compensation Plan

The following benefits are available to Harris County employees in full-time and select part-time positions:

• Professional learning & development opportunities
• Retirement pension (TCDRS defined benefit plan)
• Flexible work schedule*
• METRO RideSponsor Program*

* Participation may vary by County department. The employee benefits plans of Harris County are extended to all eligible participants across various departments with the exception of the Harris County Community Supervision and Corrections Department, for which the cited Health & Wellness Benefits are administered through the State of Texas.
In accordance with the Harris County Personnel Regulations, group health and related benefits are subject to amendment or discontinuance at any time. Harris County Commissioners Court reserves the right to make benefit modifications on the County's behalf as needed.
For plan details, visit the Harris County Benefits & Wellness website:
01

Which of the following best describes your highest level of education completed as it relates to this position?Qualifying information must be documented in the Education section of your application.

• High School or GED diploma
• Associate Degree
• Bachelor's Degree
• Master's Degree or higher
• None of the above

02

If you selected a college degree in response to the previous question, which of the following best describes your major?

• Information Technology
• Cybersecurity
• Other Related Field
• Unrelated Field
• N/A; No Degree

03

Please describe your educational background including level of education completed, area of study and completed major and minor programs.
04

Do you have experience consulting with stakeholders on security best practices, network controls, and regulatory requirements?

• Yes
• No

05

Please provide details about your verifiable experience consulting with stakeholders on security best practices, network controls, and regulatory requirements.Do not use "Please see Resume" or "See Resume"(To be considered, qualifying experience must be documented in your application's employment history)Please include your (a) role(s), (b) types of organizations, (c) scope of duties and responsibilitiesIf you do not have this experience, please type "None" in the space provided.
06

Do you have proficiency with Governance, Risk & Compliance (GRC) tools?

• Yes
• No

07

Which of the following describes your level of proficiency using a personal computer and common office software such as MS Office Suite (Word, Excel, PowerPoint, and Outlook). Please select your level of proficiency based on the following descriptions:

Advanced:
A person with this level of skills is able to produce very large, complex formal documents that require a table of contents, footnotes, endnotes, bookmarks, and other special elements; a wide range of graphic effects, and use advanced techniques for analyzing and manipulating data. Has full mastery of Macro commands and skills to tie the objects together into a cohesive system by using Macros and Visual Basic for Applications code. Makes interactive presentations by using hyperlinks and action buttons.

Intermediate:
A person with this level of skills is able to customize toolbars, import and insert graphs, embed Excel data, and elaborate reports. Understands the concepts of databases and is able to work with charts and to use the list management capabilities of Excel. Able to use complex query techniques, create efficient forms and reports, and create Macros to automate these forms. Makes interactive presentations by using hyperlinks and action buttons.

Basic:
A person with this level of skills is able to use basic formatting, editing, printing functions, and understands the document page setup. Has the ability to enter and correct data, modify a workbook, format a worksheet, and use printing functions. Understands the different database concepts and structures and is familiar with data validation and is able to create a simple presentation in PowerPoint, run it, and print it.

Entry Level:
A person with this level of skills has the ability to open, create, save and modify documents in Word, send and receive email in Outlook and create spreadsheets in Excel. Format documents for printing, comfortable using the printer menu to preview documents. Has ability to change the font, the margins, insert or delete pages and use the built-in spellchecker and grammar check.

• Advanced
• Intermediate
• Basic
• Entry Level
• Not proficient

Required Question