Principal Information Security Analyst (Information Systems Analyst, Principal - Generalist)

The Position

Job Appointment: Full Time, Regular

Work Schedule: Monday - Friday, 8:00 AM - 5:00 PM. Alternate schedules may be available.

Work Location: This position has an exception to work primarily remotely. However, there will be instances when it is necessary to come onsite for work (with as much advance notice as possible). Remote work must be performed within Oregon or Washington. For more information, click here .

Union Representation: PROTEC17. To view current labor agreements, click here .

Starting Pay: The City of Portland follows the Oregon Equal Pay Act. Your salary is determined based on the experience listed in your resume that is directly related and equivalent to the position for which you are applying.

Help protect the technology and critical infrastructure that Portland communities depend on every day.

The Bureau of Technology Services (BTS) is seeking two Principal Information Security Analysts to strengthen cybersecurity, reduce risk, and support reliable delivery of essential City services.

In this role, you will provide senior technical leadership across information technology (IT) and operational technology (OT) environments, including industrial control systems and supervisory control and data acquisition (ICS-SCADA) systems. You will translate complex security and compliance requirements into practical solutions that protect City information, support operational continuity, and improve cybersecurity maturity.

The Two Positions Support The Following Service Areas

• Public Safety Service Area: Bureau of Emergency Communications, Portland Bureau of Emergency Management, Portland Fire & Rescue, and Portland Police Bureau.
• Public Works Service Area: Bureau of Environmental Services, Portland Parks & Recreation, Portland Bureau of Transportation, and Portland Water Bureau.
  
  

Both positions report to the Chief Information Security Officer (CISO) and work within a matrix reporting structure with their respective service area’s senior managers. Assignments may emphasize enterprise security architecture and engineering or OT cybersecurity and critical infrastructure resilience, depending on program priorities and candidate strengths.

These positions work primarily remotely, with onsite attendance required for operational needs and cybersecurity incidents. Remote work must be performed within Oregon or Washington.

What You’ll Do

• Lead cybersecurity improvements: Assess current capabilities, identify security gaps, and develop measurable improvement plans across City IT and OT environments.
• Advise on security architecture: Guide technology teams and leadership on secure system design, cloud security, identity and access management, data protection, network security, and zero trust principles.
• Strengthen security operations: Develop and improve technical baselines, secure configurations, monitoring, alerting, vulnerability management, and operating procedures.
• Protect critical infrastructure: Partner with operational teams to address OT and ICS-SCADA risks, including network segmentation, secure remote access, vendor connectivity, monitoring, and recovery readiness.
• Assess and prioritize risk: Conduct or support threat modeling, risk assessments, control reviews, vulnerability assessments, penetration testing, and audits. Recommend practical remediation and investment priorities.
• Support governance and compliance: Align cybersecurity practices with City policies, applicable regulatory requirements, and recognized frameworks. Prepare documentation and evidence that support audits and compliance reviews.
• Integrate security into City projects: Participate in architecture reviews and help incorporate cybersecurity requirements into technology planning, procurement, implementation, and service operations.
• Support incident response: Assist with investigation, containment, recovery, and improvements following cybersecurity incidents.
• Build shared understanding: Explain technical findings and risks to diverse audiences, document recommendations and decisions, and support training and knowledge sharing across teams.
  
  

Ideal Candidate Profile

• Experienced Technical Leader: Brings broad enterprise cybersecurity expertise and depth in security architecture, engineering, risk management, or OT security.
• Practical Problem Solver: Recommends security controls that balance risk, compliance, safety, operational continuity, and service delivery.
• Collaborative Partner: Builds trust across technical teams, bureau leadership, operational staff, vendors, and external partners. Can influence decisions across organizational boundaries.
• Clear Communicator: Creates useful technical documentation and translates complex cybersecurity issues into actionable recommendations for executives and nontechnical audiences.
• Continuous Improvement Focus: Works independently to assess capabilities, prioritize improvements, and demonstrate measurable progress.
• Critical Infrastructure Perspective: Understands the challenges of protecting essential services, including legacy systems, operational constraints, and recovery needs. Experience with OT/ICS-SCADA, NIST SP 800-82, or ISA/IEC 62443 is valuable.
• Public Service Commitment: Values equitable outcomes, responsible use of City resources, and reliable services for the community. Works effectively and respectfully in a culturally and gender-diverse workplace.
  
  

To Qualify

Qualifications

Please address and demonstrate, in your cover letter and resume, how your education, training, and/or experience meet each of the following minimum qualifications. Include specific examples describing the work you performed, your individual role, the tools or methodologies you used, and the results. Statements that you have the required experience, without supporting examples, do not provide enough information for reviewers to assess your qualifications :

• Experience providing senior technical leadership in cybersecurity architecture, risk management, and compliance across complex enterprise technology environments, supported by relevant formal training, industry-recognized certifications, or equivalent professional experience.
• Experience with cybersecurity frameworks and standards, including the NIST Cybersecurity Framework and relevant NIST Special Publications, and their application to security assessments, control design, and cybersecurity improvement planning.
• Experience in enterprise security practices across networks, systems, applications, cloud platforms, operating systems, and virtualization, including identity and access management, zero trust principles, security hardening, and configuration management.
• Experience evaluating or improving cybersecurity operations using tools and practices such as security information and event management (SIEM), endpoint detection and response (EDR), intrusion detection and prevention, firewalls, vulnerability management, and penetration testing.
• Experience interpreting and supporting applicable regulatory requirements and cloud security controls, including documenting compliance, assessing control gaps, and recommending remediation priorities.
• Experience analyzing complex cybersecurity issues, developing clear technical documentation and actionable recommendations, and communicating effectively with technical teams, leadership, and nontechnical partners to support collaborative decisions.
  
  

Additional Requirements: Selected candidates must pass a comprehensive background investigation, possess a valid Oregon or Washington driver’s license, and be able to travel to City facilities when needed. Where equivalent experience is accepted in place of cybersecurity training or certifications, additional training and certifications

Preferred Qualifications

These qualifications are not required but will be considered when evaluating applicants:

• Experience with operational technology (OT), industrial control systems (ICS), supervisory control and data acquisition (SCADA), and distributed control systems, including OT network architecture, segmentation, and the Purdue Model.
• Experience applying OT cybersecurity guidance, such as NIST SP 800-82 or ISA/IEC 62443, while addressing safety, availability, legacy systems, and operational continuity.
• Experience in use of industrial protocols, such as Modbus, DNP3, and OCP, and their cybersecurity considerations.
• Experience implementing OT monitoring, anomaly detection, secure remote access, vendor access controls, or incident response processes.
• Experience supporting architecture review boards, enterprise risk management, governance, risk, and compliance tools, or cybersecurity maturity programs.
• Experience working in government, utilities, healthcare, or other regulated or critical infrastructure environments.
• Experience developing cybersecurity strategies, architecture roadmaps, maturity models, or measurable improvement plans.
• Relevant cybersecurity certifications, such as CISSP, CISM, CISA, GIAC, CCSK, or comparable credentials. FEMA Incident Command System and National Incident Management System (ICS/NIMS) training is also valuable.
  
  

The Recruitment Process

How To Apply

• Submit your resume and cover letter by the closing date.
• (Optional) Submit Veterans’ Preference documents , if applicable. If this is your first time applying with the City of Portland, or if you haven’t requested veteran preference before (and would like to now), please attach your DD214-Member 4 and/or VA Benefit Letter to your application. Once we verify your eligibility, we’ll record your veteran preference in our system, so it automatically applies to your future applications.
• Click here for application tips for resume, supplemental question response and/or cover letter.
  
  

What To Expect

• Application Review - Week of November 16, 2026 : We'll review your application materials to ensure you meet the minimum qualifications listed above.
• Notice/Feedback - Week of November 30, 2026 : You will receive an email when the minimum qualification review is complete. If you disagree with the evaluation results, you may request a review within 14 days of the email notice, per City Administrative Rule 3.01 .
• Selection Process - Mid-December : The hiring bureau will review qualified applications, conduct interviews, and check references.
• Conditional Job Offer: Final candidates may undergo a background or driving record check, depending on the position.
  
  

Additional Information

Learn More About:

• How to Apply Videos and Workshops
• City of Portland Core Values
• HRAR-3.01 - Recruitment Processes
• Veteran Preference Information
• Total Compensation and Benefits
• Language Pay Differential Eligibility
  
  

We’re committed to providing a fair, inclusive, and accessible hiring process. If you need assistance with your application or would like to request a reasonable accommodation due to a disability, pregnancy, or religious belief, please contact the recruiter listed below.

Questions? We're here to help!

TroyLynn Craft, Senior Recruiter

[email protected]

Bureau of Human Resources