Senior Cyber Compliance Specialist (Information Systems Specialist 8) Hybrid Work Options (Permanent Full-Time Position)

Initial Posting Date:

10/28/2026

Application Deadline:

11/11/2026

Agency:

Oregon Health Authority

Salary Range:

$7,807 - $11,823

Position Type:

Employee

Position Title:

Senior Cyber Compliance Specialist (Information Systems Specialist 8) Hybrid Work Options (Permanent Full-Time Position)

Job Description:

If this opportunity aligns with your strengths, background, and commitment to fostering inclusivity, we encourage you to apply! At the Oregon Health Authority (OHA), we value diversity and encourage applicants from all backgrounds and experiences to help us build a stronger, more equitable future for all.

 

Candidates must submit a resume, cover letter and complete Workday application. Those who do not follow these instructions will be declined. This is a permanent full-time position (Not a limited duration role).

 

Opportunity Awaits, Apply Today! – Senior Cyber Compliance Specialist (Information Systems Specialist 8) Rotation – Hybrid work available

 

The primary purpose of a Senior Cyber Specialist position is a crucial role in an OHA/ODHS IT security program by managing and securing IT assets such as desktops, laptops, servers, virtual and on-premises platforms and mobile devices. This position combines information technical expertise with customer service skills to ensure the protection of agency information assets, while also addressing agency security requirements supporting business operations and customer needs.

 

IT Security Management: The Senior Cyber Compliance Specialist is responsible for developing, implementing, and maintaining security solutions that align with state and federal requirements, Center for Internet Security and National Institute of Standards and Technology Frameworks, that enable business units to meet their statutory mandates. The role focuses on enhancing IT security for the agencies by implementing best practices, policies, and standards.

 

Incident Response: In the event of IT security events, incidents or breaches, the Senior Compliance Specialist plays a critical role in responding to and mitigating the impact on agency IT assets. This involves investigating events, incidents, identifying compromised assets, and taking remedial actions to contain and eradicate threats.

 

Vulnerability Management: The position assists in identifying and remediating vulnerabilities on IT Assets ensuring that all software and hardware are up to date with the latest security patches and firmware

 

Policy Compliance: The Senior Cyber Compliance Specialist advises on the development of information protection and IT security policies and enforces the policies to ensure both agencies are compliant with state and federal requirements in delivering secure and protected IT assets in support of business unit functions.

 

Security Monitoring and Alerting: This position will ensure continuous monitoring strategies are in place for each system/platform and work with Enterprise Information Services (EIS) Cyber Security Services (CSS) Security Operations Center (SOC) for suspicious activity, unauthorized access, and potential security incidents.  The Senior Cyber Operations & Compliance Specialist responds to security alerts, conducts investigations, and escalates incidents as necessary to ensure compromised IT assets are contained and isolated and that incidents are eradicated from the network.

 

Documenting and Reporting: Accurate and up-to-date documentation is essential in IT security. The Senior Cyber Compliance Specialist maintains records of security events and incidents, vulnerabilities, and remediation efforts. They also generate reports to provide insights into management and demonstrate compliance with IT security standards and regulations.

 

Collaboration and Communication: The role involves working closely with other IT security professionals, OIS Subject Matter Experts and teams, and departments across agencies to ensure alignment with security policies and initiatives.

 

Continuous Improvement: The Senior Cyber Compliance Specialist actively seeks ways to improve IT security and customer service processes. They stay up to date with the latest security threats and technologies to enhance the agency’s security posture.

 

For a full review of the position description, please click here.

 

What We Are Looking For

Minimum Qualifications: These qualifications must be reflected in your application for consideration.

 

(a) Seven (7) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management. 

 

OR

 

(b) An associate’s degree or higher in Computer Science, Information Technology, or related field, OR completion of a two (2) year accredited vocational training program in information technology or related field; AND 5 years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.   

 

OR

 

(c) A bachelor’s degree in computer science, Information technology, or related field AND three (3) years of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.   

 

OR

 

(d) Master’s degree in information technology, Computer Science, or related field AND

one (1) year of information systems experience in cybersecurity operations, systems or network administration, and information security risk management.    

 

Desired Attributes:

The following are desired attributes that we have identified as key to success for this role at OHA. These are the attributes we are looking for in our top candidate. If you have any of these, please let us know in your application.

 

• Successful completion of one of the following certifications or willingness to obtain one within 12 months of hire: (a) Certified Information Systems Security Professional (CISSP) OR (b) Certified Information Security Manager (CISM).

• Experience using management strategies and techniques to lead information security technical and program professionals.

• Experience working under federal, state and agency regulations and guidelines related to information security and protection from unauthorized disclosure of individually identified information.

• Experience with data governance and managing regulated data.

• Ability to translate technical issues and concepts to non-technical audience.

• Knowledge of the ODHS and OHA programs and other related government programs.

• Excellent written and verbal communication and presentation skills.

• Experience working with diverse groups with varying priorities and goals and moving those groups toward consensus.

 

Regarding CJIS:

• Ability to be cleared by the FBI Criminal Justice Information Services (CJIS) and Oregon State Police through a fingerprint-based criminal background check for access to criminal justice information (CJI).

• Must be able to pass CJIS training and testing.

• Requires a successful OHA background check, including a fingerprint-based national background check and abuse/neglect check.

• Preference Statement: Preference may be given to candidates who possess the following job-related knowledge, skills, and abilities.

• Professional experience in assessing and implementing security controls aligning with NIST and CIS controls, and a strong understanding of other regulated data frameworks, like HIPAA, OCIPA, and ISO 27001

 

Application Guidance

Your candidate profile and application are your opportunity to showcase your skills and interest in this role. Submissions will be reviewed for clarity, consistency, and communication skills, and for alignment with the guidance provided in the following:

 

Submission Requirements:

• Resume – Attach your current resume that clearly outlines your education and work experience relevant to this position.
• Cover Letter – Attach a cover letter/letter of interest, it will be reviewed and considered during the review and selection process.
• Supplemental Questions – Answer all supplemental questions completely and accurately.
• Final Check! – Before submitting, confirm that all required materials are included, and your Workday Job History is current. The information in your application will be used to complete an Equal Pay Analysis to determine salary placement upon hire. Visit the Equal Pay Analysis Webpage for more information.

 

How to Apply:

• External Candidates: Visit the State of Oregon job opportunities webpage to submit your application. Be sure to follow all application submission requirements.
• Internal Candidates: Current State of Oregon employees must apply through their employee Workday login, following all submission requirements.

 

After You Apply:

• Complete any pending tasks in Workday under “My Applications” prior to the application deadline.

• Check your email (including junk folder) and Workday inbox regularly for updates on your application.

 

Reminders:

• Eligible veterans and Oregon National Guard servicemembers (current and former) who meet the qualifications of the position will be awarded candidate preference. To protect your information and ensure correct processing, please follow the instructions for submitting your Veterans’ Preference documentation.

• Please download and save a copy of this job announcement and linked position description, as it is not available after the application deadline.

 

If you're driven by the passion to do something meaningful that changes lives, the Oregon Health Authority is the place for you. We also offer a competitive benefits package including:

• Excellent, low-cost medical, vision, and dental coverage for you and your family.
• Optional benefits like life insurance, disability coverage, deferred compensation, and FSA options for health and childcare.
• Generous paid time off: 11 holidays, 3 personal days, monthly sick leave, and vacation accrual starting at 8 hours/month.
• Potential eligibility for the Public Service Loan Forgiveness Program.
• Retirement security through Public Employees Retirement System (PERS)/Oregon Public Service Retirement Plan (OPSRP).
• Training and development opportunities to grow your career with the State of Oregon.

 

Additional Details

• This announcement is for 1 full-time, permanent, classified, Senior Cyber Compliance Specialist (Information Systems Specialist 8), based in Salem, Oregon.

• This is a hybrid position. “Review Section 4: Working Conditions” in the position description (linked above) for more information.

• Employment is contingent upon a criminal records check that meets OHA criteria at the time of hire and throughout employment.

• The salary listed is the non-PERS qualifying range. If the successful candidate qualifies for PERS, the salary range will increase by 6.95%. For more information, see the Classification and Compensation page.

• The State of Oregon does not request or require your age, date of birth, attendance or graduation dates from an education institution during the application process.

• This position does not provide visa sponsorship. Within three days of hire, you will be required to complete I-9 documentation and confirm authorization to work in the United States. OHA will use E-Verify to verify work authorization. If your employment eligibility depends on sponsorship now or in the future, you will not meet the requirements for this position.

 

Contact Information

Recruiter: Kyle Phillips

Email: kyle.phillips@oha.oregon.gov  

Phone (text friendly): 503-509-3589

Accommodation Requests (ADA): OHA provides reasonable accommodation under the ADA, which may include alternative formats of materials or language support. If you need accommodation to apply for this position or participate in the selection process, please contact the recruiter listed above.

 

 

Helpful Links & Resources

How to Set Job Alerts | Workday Applicant FAQ | Oregon Health Authority | Facebook | Instagram | LinkedIn | Veterans Resources | What You Need to Know to Get the Job

 

The Oregon Health Authority is an affirmative action and equal opportunity employer, committed to fair employment practices and pay equity for all employees. We do not discriminate based on protected class – including race, sex, veteran status, disability, age, color, religion, national origin, marital status, or sexual orientation – and does not screen applicants based on current or past compensation. Salary is determined through a fair review of your education, experience, and training as it relates to the position.

 

OHA is an anti-racist organization working to eliminate health inequities and dismantle structural barriers that impact underserved communities. Join us in advancing our Strategic Plan and building a more equitable Oregon.