Management Analyst II Information Security Associate

If you are a current State of Maine employee please submit your application through the internal application process using the Find Jobs report in PRISM. Seasonal employees who do not have PRISM access should apply through the States career page and indicate on the application that they have previously worked for the State.

.

Office of Information Technology

Opening Date: February 13 2026

Closing Date: March 02 2026

Job Class Code: 0393
Grade: 24 Professional/Technical
Salary: $54442.97 - $76329.70*/Annually (*Includes 5.33% recruitment and retention stipend)
Position Number:

Position Type: Full-Time

Location: Augusta

Telework: Available

OVERVIEW:

As an Information Security Associate you will play a key role in supporting the States enterprise security program. This position combines program administration analysis and technical liaison responsibilities to help safeguard information assets. You will research and evaluate security and privacy issues translate findings into actionable policies and awareness materials support risk and compliance activities and partner with business units IT and vendors to streamline processes and implement enhancements.

MaineIT is seeking a highly talented individual who will represent our C.A.R.E. values in all that they do. At MaineIT we:

• Practice Customer-focus ensuring that our customers are heard and their needs are met.
• Hold ourselves to a high level of Accountability by being transparent with our stakeholders.
• Maintain an effective level of Responsiveness by providing timely updates in a proactive manner.
• Strive to provide Empathy-driven people-focused services by applying emotional intelligence skills and behaviors.

HYBRID WORK OPPORTUNITY: This position has the potential to work from home as much as 90% of the time with management approval.

WHAT YOULL DO:

Every day brings new challenges and opportunities in MaineITs Information Security Office. While no two days are alike your role will typically involve:

• Research and Reporting: Analyze security and privacy issues document findings and prepare reports presentations and actionable recommendations.
• Policy & Compliance: Develop implement and maintain security policies and procedures aligned with NIST HIPAA and other frameworks; support audits and compliance documentation.
• Risk Management: Assist with risk and vulnerability assessments create migration plans monitor progress and report on overall security posture.
• Security Awareness & Training: Design and deliver awareness programs (training campaigns phishing tests) and manage the security awareness platform (e.g. KnowBe4 Cybrary).
• Process & System Improvement: Apply systems analysis to optimize workflows gather requirements troubleshoot vendor-supported applications and advocate for automation/configuration enhancements.
• Project Coordination & Metrics: Coordinate cross-functional initiatives track action items and ensure smooth implementation of security programs. Maintain accurate inventories of training and phishing data and performance metrics.

WHY THIS ROLE STANDS OUT:

In todays information security landscape you have countless career paths to choose from. Heres why this opportunity is different:

• Broad Security Impact: Influence strategy and execution across security awareness and training policy risk compliance and reporting.
• Ownership of Awareness Programs: Lead phishing tests training campaigns and platform administration.
• Business-Tech Connector: Translate technical concepts into clear language and improve workflows.
• Efficiency Driver: Use process improvement and automation tools to streamline operations.
• Collaborative Problem Solver: Coordinate projects and work with vendors and IT to resolve issues.

WHY YOULL LOVE WORKING AT MAINEIT:

If youre seeking a culture that supports growth fosters success and values protecting the confidentiality integrity and availability of State of Maine data and systems then MaineIT is where you belong. With the MaineIT Information Security Office you can expect:

• Generous Telework Opportunities: This position has the opportunity to work up to 90% remotely.
• Meaningful & Impactful Work: Play a vital role in protecting Maines digital infrastructure.
• Supportive Team: Join a collaborative professional environment that invests in your development.
• Work-Life Balance: Flexible scheduling and a healthy balance of professional and personal time.
• Innovative Culture: Be part of a team that values innovation and continuous improvement.

MINIMUM QUALIFICATIONS:

• Eight (8) years of education training and/or experience analyzing evaluating and/or developing improvements to organizational and/or managerial systems programs and practices.

PREFERRED COMPETENCIES:

• Information Security Expertise: proven experience in governance risk management compliance activities and applying industry frameworks such as NIST CIS and HIPAA;
• Security Awareness & Training Program Management: Skilled in administering platforms like KnowBe4/PhishER including campaign design configuration reporting and actionable insights;
• Technical Troubleshooting: Strong ability to diagnose application issues collaborate with vendors and IT teams for resolution and document root causes with preventive workflows;
• Process Improvement & Automation: Familiarity with agile methodologies and tools such as Power Automate and low-code platforms to streamline workflows;
• Communication & Documentation: Exceptional written and verbal skills for translating technical concepts into clear language; experienced in preparing reports briefing memos and training materials; and
• Broad IT Knowledge: Working understanding of web applications networking email flow and related technologies beyond Information Security.

CONTACT INFORMATION: For more information or questions specific to the position please contact

.

If you are unable to complete the online application please contact the Human Resources representative listed on the job opening you are interested in applying for. They will work with you for an alternative method of submitting.