Job Seekers, Please send resumes to resumes@hireitpeople.com Complete Description:   *local candidates strongly preferred*ALL candidates MUST be able to attend a personal interview, NO phone interviews, NO Skype, NO exceptions.

The VDH - Office of Epidemiology (OEPI) is seeking a contractor to help provide an initial environmental assessment of their IT systems including a risk assessment. OEPI would like system and data owners documented, both general and application controls.
This position will work with end users Office of EPI to design and execute a sustainable Information Security risk assessment and security planning process for the automated applications used. Additionally, this position will work with end users of identified EPI systems to develop requirements in response to business requests for systems enhancements, modifications, and newly identified business initiatives; evaluate alternative strategies and recommend viable solutions that are compatible with current technologies and systems; develop requirements documents; interact and provide direction to developers doing work assigned to projects; provides assistance to system owners on appropriate application controls; develops methods for improving system processes; develop and present training to inform staff of system changes and enhancements; actively participate in unit testing of the applications; maintain documentation and records for assigned projects; participates in production problem resolution and makes suggestions for process improvement. 
Specific Tasks: 1. Information Security Risk Assessment and Planninga. Work with the Office system owners and OIM staff to determine and document general system functionsb. Collaborate with the Office to create (or update) required data classification and system inventory documentsc. Work with the Office, OIM and ISO to complete the comprehensive Sensitive IT System Risk Assessment Report and Security Pland. Work with the Office and OIM to prioritize information security risks and develop a remediation schedule.e. Work with the Office to develop (or update) and implement required procedures and controls to support information security requirements.f. Develop/update the IT Application Roadmap document to include security risks that will require application modifications.2. Support for System enhancements, modifications and ongoing supporta. Provide assistance to the Office in generating IT project initiation requests for enhancements and modificationsb. Document requirements for enhancements and modifications (business analysis)c. Work with OIM and the Office in developing annual MOA’s for application support and creating MOA addenda for system enhancements and modifications.

SkillRequired / DesiredAmountof Experienceexp. in business requirement gathering using interviews, meetings/workshops, bus. process analysis, use case scenarios, gap analysis, questionnairesRequired5Yearsrequirement analysis to reconcile conflicts, information decomposition, abstract up from low-level information to a general understnadingRequired3Yearstranslating business requirements into detailed requirement document, process and workflow diagrams, use-case scenarios, wireframes, prototypingRequired3Yearscreating deliverables, traceability matrix, preliminary project plan, maintaining requirement repository and versioningRequired3Yearsdirectly working and communicating with business users, technical team and multiple stakeholders on information distribution and collaboration.Required3YearsMS Visio, MS Office and MS ProjectRequired3YearsStrong analytical and product management skills required, thorough understanding of how to interpret business needs and translate them into requmntsRequired3YearsExperience and understanding of Information Technology Security risk assessment and security procedures and control development.Required2Yearsexcellent verbal and written communication skills and the ability to interact professionally with a diverse group, executives, managers and SMERequired3Years