Mainframe Security Audit Analyst Jobs (NOW HIRING)

Are you looking for a rewarding career with an organization that values their staff? The Department of Innovation & Technology (DoIT) is seeking to hire qualified candidates with the opportunity to work in a dynamic, creative thinking, problem solving environment. This position serves as the Mainframe Security Manager- RACF overseeing the RACF administration and maintenance across mainframe environments conducting and coordinating in-depth studies involving substantial technical research and systems analysis for Mainframe Security RACF and performing problem diagnostics of complex RACF requests and security problems. In this role you will produce audit reports for auditors using RACF utilities including z/OS Audit utility and CARLa report writing. In addition, you will serve as a working supervisor who remains abreast of new developments in the information technology field by continuing education through meetings, training sessions, seminars, and conferences to increase familiarity with and remain current on products, vendors, techniques, and procedures. If you possess these knowledges, skills, abilities, and experience, we invite you to apply for this position to join the DoIT Team!

As a State of Illinois employee, you receive a comprehensive benefits package including:

• Competitive Group Insurance benefits including health, life, dental and vision plans.
• Flexible work schedules (when available and dependent upon position).
• 10 -25 days of paid vacation time annually (10 days for first year of state employment).
• 12 days of paid sick time annually which carry over year to year.
• 3 paid personal business days per year.
• 13-14 paid holidays per year dependent on election years.
• 12 weeks of paid parental leave.
• Pension plan through the State Employees Retirement System.
• Deferred Compensation Program – voluntary supplemental retirement plan.
• Optional pre-tax programs -Medical Care Assistance Plan (MCAP) & Dependent Care Assistant Plan (DCAP).
• Tuition Reimbursement Program and Federal Public Service Loan Forgiveness Program eligibility.

For more information regarding State of Illinois Benefits follow this link: https://www2.illinois.gov/cms/benefits/Pages/default.aspx

• Under administrative direction, serves as the Mainframe Security Manager – Resource Access Control Facility (RACF) for the Department of Innovation & Technology (DoIT), overseeing and managing the RACF administration and maintenance across mainframe environments, including configuring and maintaining user and group security profiles, access lights, and permissions within a z/OS environment.
• Conducts and coordinates in-depth studies involving substantial technical research and systems analysis related to RACF security, including conducting reviews of complex components and processes making recommendations for modifications to provide availability, flexibility, and usability for clients.
• Develops, writes, implements, and interprets policies, procedures, standards, and methodologies for the project team to ensure compliance with internal controls, audit requirements, and best practices, including leading the diagnosis and resolution of complex RACF security issues.
• Establishes, maintains, and manages documented processes ensuring appropriate security control over mainframe user access, including aligning operational procedures with applicable Audit Playbook, SOC Audit Control Matrices, and SOC Audit Description of Service.
• Serves as a working supervisor.
• Keeps abreast of new developments in the information technology field by continuing education through online training platforms, meetings, training sessions, seminars, and conferences to increase familiarity with and remain current on products, vendors, techniques, and procedures.
• Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.

• Requires knowledge, skill, and mental development equivalent to completion of four (4) years of college with coursework in management information systems, data processing, telecommunications or directly related information technology fields.
• Requires prior experience equivalent to three (3) years of progressively responsible administrative experience in management information systems, data processing, or telecommunications in a public or business organization.

• Requires three (3) years of professional hardware administration experience administering IBM RACF or comparable mainframe security software, including configuring and maintaining user and group security profiles, access rights, and permissions within a z/OS environment.
• Requires three (3) years of hardware administration professional experience developing, interpreting, and implementing mainframe security policies, procedures, and standards to ensure compliance with internal controls, audit requirements, and best practices.
• Requires three (3) years of professional experience monitoring, managing, and fulfilling IT infrastructure ticket queues, prioritizing time-sensitive requests, escalating critical issues, and ensuring service-level agreements (SLAs) are met.

• Three (3) years of professional hardware administration experience administering IBM RACF or comparable mainframe security software, including configuring and maintaining user and group security profiles, access rights, and permissions within a z/OS environment.
• Three (3) years of hardware administration professional experience developing, interpreting, and implementing mainframe security policies, procedures, and standards to ensure compliance with internal controls, audit requirements, and best practices.
• Three (3) years of professional experience monitoring, managing, and fulfilling IT infrastructure ticket queues, prioritizing time-sensitive requests, escalating critical issues, and ensuring service-level agreements (SLAs) are met.
• Three (3) years of professional experience conducting technical research and systems analysis to develop IT security solutions, including preparing detailed recommendations, analysis documents, and status reports for RACF or similar systems.
• Three (3) years of professional experience performing advanced diagnostics and resolving complex RACF security incidents, including unauthorized access attempts and critical system issues, while serving in an on-call or incident response capacity.
• Three (3) years of professional experience using audit and reporting tools such as CARLa, zSecure Audit, and z/OS utilities to generate audit reports, validate security configurations, and respond to internal or external audit requests.
• Demonstrated ability to effectively communicate complex technical security concepts to both technical and non-technical stakeholders, including collaborating with agency customers, auditors, and internal teams to ensure shared understanding, alignment, and timely resolution of mainframe security issues.

NOTE: Applicants must possess the ability to meet ALL of the following conditions of employment, with or without reasonable accommodation, to be considered for this position.

• Requires the ability to verify identity.
• Requires employment authorization to accept permanent full-time position with State of Illinois.
• Requires the ability to pass a position specific, agency required background check.
• Requires self-disclosure of criminal history.
• Requires the ability to travel in performance of duties.
• Requires the ability to work outside of normal hours to meet deadlines and requires the ability to serve in an on-call capacity.
• Requires the ability to work overtime including scheduled, unscheduled, short notice, evening, weekends, and holidays.
• Requires the ability to use agency supplied equipment such as laptop, personal computer, work cell phone, etc.
• Requires the ability to lift and carry objects or equipment weighing up to 20 pounds. This is considered light work as defined by the U.S. Department of Labor (20 CFR 404.1567(b)). Light work involves lifting no more than 20 pounds at a time with frequent lifting or carrying of objects weighing up to 10 pounds.
• The conditions of employment listed are incorporated and/or related to any duties included in the position description.