Lead enterprise security planning and execution for statewide protection of Minnesota information assets as part of the Enterprise Security team.

Plan, design, implement, and maintain enterprise-wide information security programs to protect State information assets from internal and external threats.
Provide technical leadership across multiple security domains, including:
- Risk management
- Governance
- Network and application security
- Security architecture
- Incident response
- Business continuity
- Compliance
Ensure security efforts integrate with broader IT systems and processes.
Develop and recommend information security policies, standards, and best practices.
Lead security risk assessments and reporting.
Ensure appropriate security controls are included in new systems.
Support training, certification, and project management initiatives.
Serve as a lead engineer to establish and maintain the cybersecurity framework within Minnesota Health and Human Services, helping government entities manage risk, strengthen security posture, and meet enterprise security requirements.

Minimum of five (5) years of experience performing IT business analysis functions.
Experience in information security, cybersecurity, or information technology, including enterprise security engineering, security architecture, risk management, or security operations.
Experience developing, implementing, or maintaining enterprise information security controls, security policies, standards, risk assessments, or governance processes using recognized security frameworks such as:
- NIST
- ISO 27001
- COBIT
- Similar industry standards
Experience interpreting and applying information security or privacy regulations, including examples such as HIPAA, CJIS, PCI DSS, or IRS FTI, and preparing security documentation, risk assessments, policies, or technical reports.
Experience leading or coordinating information security projects and providing technical guidance or consultation to IT staff, project teams, or business stakeholders.
Demonstrated ability to communicate clearly and effectively to facilitate mutual understanding.
Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences.

Paid vacation and sick leave
12 paid holidays each year
Low-cost medical, dental, vision, and prescription drug plans
6 weeks paid leave for parents of newborn or newly adopted children
Pension plan that provides income when you retire (after working at least three years)
Employer paid life insurance
Short-term and long-term disability insurance
Tax-free expense accounts for health, dental, and dependent care
Resources that provide support and promote physical, emotional, social, and financial well-being

Onsite requirement: work onsite at 540 Cedar Street, St. Paul, MN, at least 50% of the time, with limited telework available.
Telework eligibility depends on residence:
- Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
- Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
- Candidates living 50 miles or more from the worksite in a bordering state may work onsite 100% or may be telework eligible if relocating within 50 miles.

Professional certification in information security or information technology, such as CISSP, GSEC, CEH, CCE, ENCE, GSFI, ITIL, or comparable industry-recognized credentials.
Experience mentoring technical staff, leading or coordinating cross-functional security initiatives, and serving as a subject matter expert on:
- Enterprise security technologies
- Incident management
- Vulnerability management
- Security risk management
- Security governance

Successful candidate must pass legally required checks prior to employment, which may include:
- SEMA4 Records Check (applies to current and past state employees only)
- Criminal History Check
- Reference Check
- Social Security and Address Verification
- Education Verification
- CJIS Background Check
- Other legally required checks
Minnesota IT Services does not participate in the federal E-Verify program.
Minnesota IT Services is unable to sponsor work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or documentation requiring employer participation in E-Verify.
All applicants must be legally authorized to work in the United States at the time of application.

How to Apply: Select “Apply for Job” at the top of the page.
Questions about applying: Careers Help Desk at 651-259-3637 or email [email protected].
Contact for position questions: Human Resources at [email protected].

To receive consideration as a Connect 700 Program applicant, apply online and email the Job ID #, Working Title, and your valid Proof of Eligibility Certificate by the closing date to [email protected].

To be considered for Veteran’s Status, indicate this on the application.
Recently Separated Veterans (RSV): top five RSV applicants who apply and meet qualifications for a vacancy shall be granted an interview (effective July 1, 2009).
Must meet all Minimum Qualifications, meet all RSV criteria, and submit a copy of DD-214 by the closing date to [email protected].
Certain Disabled Veterans: agencies may appoint certain disabled veterans on a noncompetitive basis if service requirements are met with a verified service-connected disability rating of at least 30%, qualifying documentation is provided, all Minimum Qualifications are met, and documentation is submitted by the closing date to [email protected].

Bidders: vacancy is open for bids and all qualified applicants simultaneously; filled per applicable union contract provisions; current Minnesota IT Services employees in an Information Technology Specialist 5/Information Security position who are eligible to bid and apply within the seven (7) day bidding period will be considered before filling via other means.
Current State Employees: employment provisions (including seniority and leave accrual) vary among the three branches of Minnesota State government.

Principal Information Security Engineer

Job Description