Position: Security Manager
Duration: 3 months with extension Possible
Remote Work
SPECIAL REQUIREMENTS:
GC or USC highly preferred.
DESCRIPTION OF SERVICES
Texas Education Agency requires the services of 1 Information Security Manager 3 , hereafter referred to as Candidate(s), who meets the general qualifications of Information Security Manager 3, Security and the specifications outlined in this document for the Texas Education Agency.
All work products resulting from the project shall be considered "works made for hire" and are the property of the Texas Education Agency and may include pre-selection requirements that potential Vendors (and their Candidates) submit to and satisfy criminal background checks as authorized by Texas law. Texas Education Agency will pay no fees for interviews or discussions, which occur during the process of selecting a Candidate(s).
Vulnerability Inventory and Baseline Establishment
1. Review the Agency's existing vulnerability data, including vulnerabilities identified through scanning, assessments, or other security tools.
2. Establish and maintain a consolidated vulnerability baseline.
3. Develop and document a remediation timeline for all identified vulnerabilities, reflecting current risk posture and aging.
Risk Classification and Prioritization
1. Ensure that vulnerabilities are categorized and prioritized based on risk, severity, exploitability, and potential impact to Agency operations.
2. Align vulnerability classification and prioritization to applicable NIST guidance.
3. Validate that remediation timeframes align with Agency established expectations for different vulnerability risk levels.
Remediation Coordination and Communication
1. Coordinate remediation activities with system, server, and application owners.
2. Communicate clear remediation expectations, risk context, and required timelines to responsible parties.
3. Track remediation progress and identify blockers, dependencies, or delays impacting closure.
4. Escalate overdue, high risk, or critical vulnerabilities to appropriate Agency governance or oversight bodies, in accordance with Agency processes.
Tracking, Metrics, and Reporting
1. Maintain ongoing tracking of vulnerability remediation status.
2. Produce periodic status reports summarizing.
Validation and Closure
1. Validate remediation actions through available evidence, including vulnerability scan results or other supporting artifacts.
2. Confirm closure of vulnerabilities in tracking systems once remediation is completed and validated.
3. Ensure vulnerabilities that cannot be remediated within required timeframes are formally documented and supported by approved risk acceptance or exception documentation, in accordance with Agency policy.
Program Improvement Support
1. Identify process gaps, systemic issues, or control weaknesses affecting vulnerability remediation effectiveness.
2. Provide recommendations for improving vulnerability remediation processes and accountability, aligned with NIST standards and Agency governance requirements.
CANDIDATE SKILLS AND QUALIFICATIONS
| Minimum Requirements: | ||
| Years | Required/Preferred | Experience |
| 8 | Required | Experience in Vulnerability Inventory and Baseline Establishment |
| 8 | Required | Experience in Risk Classification and Prioritization |
| 8 | Required | Experience in tracking vulnerability remediation |
| 8 | Required | Experience in producing status reports |
| 8 | Required | Experience in validating remediation actions through available evidence, including vulnerability scan results |
...looking for a Part Time Clinical Triage Nurses! Must live within 1 hour of St. Louis... ...computer applications and works in a fast-paced remote environment. Responsibilities... ...Life Support (BLS) Benefits and Legal Statement BJC Total Rewards At BJC...
Position Specifics Location: North Port Reports to: Jackson Sherer Supervises: None Parts Support Representative Job Summary Build customer relationships by traveling to customers locations, pass on any customer concerns to the CSR and Jackson, organize consignment cabinets...
...Required Travel: 0% Position Type: Salaried Salary Range :$46,000 - $53,000 MERS/Missouri Goodwill Industries is looking for an energetic, self-motivated, and professional Life Coach to join our Kansas City Excel Center team! The ideal candidate will support...
...Join Our Team as an Entry-Level Marketing Associate!No Experience? No Problem. Were Looking for Ambitious, Driven Individuals to Grow with Us! Position Overview:As anEntry-Level Marketing Associate, youll have the opportunity to learn and grow in various aspects of...
Tris Pharma, Inc. ( is a leading privately-owned US biopharmaceutical company with a focus on development and commercialization of innovative medicines in ADHD, spectrum disorders, anxiety, pain and addiction addressing unmet patient needs. We have >150 US and International...