Montgomery County is the third largest county in Pennsylvania. With just under 800,000 people living in its 487 square miles, Montgomery County is home to scores of major employers in pharmaceuticals, banking, manufacturing, healthcare and education. 

The Montgomery County government and the services it provides to its residents is a reflection of the county itself – large, diversified, sophisticated and efficient. With a $385 million budget and close to 2,400 employees, Montgomery County provides a wide range of services serving social needs, business development, employee training, recreational opportunities, public safety, court services and roads and bridges. 

The county provides and coordinates social services in innovative and efficient ways through several departments including the Office of Children and Youth, Developmental Disabilities, and Aging and Adult Services. 

Montgomery County maintains 75 miles of roads and 133 bridges; has developed over 60 miles of multi-use trails throughout the county; and cares for seven county parks and five historic sites.

Montgomery County also boasts an award-winning Department of Public Safety, which includes the only internationally accredited emergency dispatch center (911) in Pennsylvania. The dispatch center handles 770,000 calls a year; it handles 1,900 dispatches a day; and, over one million radio transmissions a week. 

The county government provides many other services to its residents, and the county, itself, is home to a wide range of recreational, cultural and artistic outlets. It is served by an excellent public transportation system and its proximity to Philadelphia adds a great deal more to the quality of life in Montgomery County.

Industry: Government Administration
Company Size: 1,001-5,000 employees

Montgomery County, PA

Savvy Admin PROD

**Summary**

The Cybersecurity Analyst supports the county’s security posture by performing vulnerability assessments, owning the vulnerability management program, leading Microsoft Purview data classification operations, and contributing to compliance activities aligned to the NIST Cybersecurity Framework (CSF). This is an early career security analyst position in an expanding cybersecurity operation. The analyst will own defined program areas within vulnerability management and data classification, draft cyber security policy and standards documentation, and manage the operational components of the county’s cybersecurity awareness training program in coordination with the ITS training team. The role reports to the network security administrator and works across ITS teams and county departments to identify, assess, and remediate security risks to county systems and data.

**Essential Duties And Responsibilities**

-  Own the vulnerability management program lifecycle — define scan schedules and SLA thresholds, conduct regular vulnerability scans across county infrastructure including servers, endpoints, network devices, and cloud-hosted services, track remediation trending over time, and produce actionable risk-ranked findings reports for ITS leadership.

-  Lead Microsoft Purview onboarding for county departments including departmental collaboration, sensitivity label taxonomy design, content classification rule maintenance, and exception adjudication. Ensure county data classification standards are enforced consistently across Microsoft 365, SharePoint, Azure, and on-premises repositories.

-  Support compliance and data classification activities under HIPAA, CJIS Security Policy, and applicable state and federal data privacy requirements by mapping technical controls to framework requirements and documenting compliance status.

-  Draft cybersecurity policies, standards, and procedures grounded in the NIST Cybersecurity Framework for review by the Network Security Administrator, including documentation covering asset management, access control, and incident detection categories.

-  Monitor security alerts from existing tools (endpoint protection, email filtering, firewall logs) and triage potential incidents, escalating confirmed threats per established procedures.

-  Coordinate patch management activities with infrastructure and applications teams to ensure timely remediation of known vulnerabilities, tracking patch compliance against defined SLAs.

-  Support ITS in conducting risk assessments for new technology procurements and system changes using ITS security and risk assessment rubrics.

-  Manage the compliance components of the county’s mandatory cybersecurity awareness training program in coordination with the ITS training team, including phishing simulation campaign execution, compliance tracking, automated notifications, and credential suspension workflows for overdue participants. Produce and deliver quarterly metrics reports to ITS leadership on training completion rates, simulation results, and program effectiveness.

-  Participate in incident response activities including detection, containment, documentation, and post-incident review. Contribute to the development of incident response playbooks as the county builds its response capability.

-  Assist in updating documentation on security controls, vulnerability management metrics, and compliance posture for reporting to ITS leadership and county stakeholders.

-  Research emerging threats, vulnerabilities, and attack techniques relevant to local government environments.

-  Assist with identity and access management reviews, including periodic access certifications and privileged account audits across county systems.

**Qualification Requirements**

**Required Knowledge, Skills, and Abilities**

-  Working knowledge of vulnerability scanning tools (e.g., Nessus, Microsoft Defender Vulnerability Management, Qualys or similar) and the ability to interpret scan results and prioritize remediation based on risk.

-  Familiarity with the NIST Cybersecurity Framework (CSF) and the ability to map organizational practices to CSF categories and subcategories.

-  Understanding of data classification concepts and applied classification and data loss prevention frameworks.

-  Practical experience with Microsoft Purview Information Protection, sensitivity labels, or comparable data classification tooling and in onboarding businesses (e.g., teams, offices, departments) with onboarding andutilizingPurview including cloud (MS SharePoint and Azure) and on-prem repositories.

-  Knowledge of common network protocols, operating systems for Microsoft (Windows Server, Windows 10/11), and Active Directory/Entra ID administration sufficient to understand security implications.

-  Familiarity with HIPAA Security Rule requirements.

-  Ability to produce clear, concise written reports and briefings that communicate technical findings to non-technical audiences, including department heads and elected officials.

-  Ability to work across teams and organizational boundaries, coordinating remediation activities with staff who do not report to ITS.

-  Working understanding of common attack vectors, the MITRE ATT&CK framework, and how threat intelligence applies to vulnerability prioritization.

-  Ability to manage competing priorities and maintain documentation discipline in an environment where processes are being established for the first time.

**Required Qualifications**

-  Bachelor’s degree in cybersecurity, information technology, computer science, or a related field. An equivalent combination of education and directly relevant experience will be considered.

-  Minimum 3 years of experience in information security, vulnerability management, IT audit, or a related discipline. Public sector experience is preferred but not required .

-  At least one active industry certification: CompTIA Security+, Microsoft Security Operations Analyst, or GIAC GSEC, or equivalent.

-  Experience with Microsoft Purview, Microsoft Defender for Endpoint, or Microsoft 365 security and compliance tools.

-  Familiarity with SIEM platforms (e.g., Microsoft Sentinel, Splunk, Elastic) and security log analysis.

**Preferred Qualifications**

-  Experience with NIST SP 800-53 controls, CIS Controls v8, or NIST SP 800-171.

-  ISACA CISM, ISACA CCOA, CompTIA CySA +, or GIAC GCIH certification.

-  Experience supporting HIPAA or CJIS compliance programs.

-  Experience developing or contributing to cybersecurity policies, standards, or governance documentation.

**PHYSICAL DEMANDS**

Work is performed primarily in an office environment with standard business hours. Occasional evening or weekend work may be required during security incidents or planned maintenance windows. This position may require on-call availability on a rotating basis as the county’s monitoring capability matures. Some travel between county facilities may be required.

**AI and Emerging Technology Competency**

Montgomery County ITS is actively adopting generative AI and automation tools to improve operational efficiency. The Cybersecurity Analyst is expected to develop competency with AI-assisted security tools, including AI-driven threat detection, automated vulnerability prioritization, and AI-supported compliance documentation. The analyst should approach these tools with practical curiosity and ability test and operate tools within established security boundaries to ensure the safety of county data and operating systems.

**Equal Employment Opportunity**

Montgomery County is an equal opportunity employer committed to creating a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.

Cybersecurity Analyst

Aya Healthcare is the largest healthcare talent software and staffing company in the United States. Aya operates the world’s largest digital staffing platform delivering every component of healthcare-focused labor services, including travel nursing and allied health, per diem, permanent staff hiring, interim leadership, locum tenens and non-clinical professionals. Aya’s software suite, which includes vendor management, float pool technology, provider services and predictive analytics, provides hospital systems greater efficiencies and superior operating results. While technology drives efficiency and scale, Aya employees power the company to deliver unparalleled accountability and exceptional experiences for our clients and clinicians. Due to our passionate employees coupled with our unique corporate culture, we've been recognized as a top workplace by Fortune, Inc. Magazine, Modern Healthcare and the San Diego Union-Tribune. To learn more about Aya Healthcare, visit www.ayahealthcare.com

Industry: Staffing and Recruiting
Company Size: 5,001-10,000 employees

Aya Healthcare

**Access This Permanent Staff RRT Job in Norristown, PA.**

**Job Details**

- Pay: $40.00 to $55.00 per hour. (This info is approximate. To view complete pay and facility information, please log in to your Aya account or register with us now.)

- Shift: 3, 12-Hour 19:00 - 07:00

**Join Aya for the most career options.**

Aya Healthcare gives you access to the most jobs — and the most exclusive opportunities — in the industry. We have strong relationships with leading facilities nationwide, and job options to support your personal and professional goals. Whether you want to put down roots with a permanent role, explore the country with a travel job or pick up per diem shifts close to home, Aya’s got you covered.

**Log In Today And**

- Search jobs

- View pay & facility details

- Get real-time job notifications

Register now to get started.

Permanent Staff RRT job in Norristown, PA - Make $40 to $55 per hour

Find your dream job with Savvy AI Recruiter. Browse thousands of opportunities from top companies. Our AI-powered system matches you with roles that fit your skills and experience.