Purpose: |
|
Under direction of the Information Security Office (ISO), this position promotes, supports, and implements the City’s Information Security Program. |
Duties, Functions and Responsibilities: |
|
Essential duties and functions, pursuant to the Americans with Disabilities Act, may include the following. Other related duties may be assigned.
- Resolves cybersecurity or privacy related incidents.
- Serves, as needed, as primary system administrator for information security or privacy systems, applications, or tools.
- Demonstrates knowledge and understanding of business needs; prioritizes information and privacy, security, and risk mitigation and controls to accomplish business objectives.
- Serves as a technical professional by working on a variety of moderately complex analytical and technical assignments; assists in the design and documentation of information security or privacy policies, procedures, and standards.
- Supports information security and privacy controls effectiveness by evaluating the results and developing action plans for vulnerability assessments, penetration testing, process, and policy audits.
- Maintains clear and concise documentation; documents incident management activities, e.g., time spent, actions taken, and status of incident; assists in designing and documenting cybersecurity or privacy processes, procedures, and standards.
- Assists in moderate to complex cybersecurity or privacy tasks to ensure the safety of technology assets and data.
- Manages information security or privacy controls to protect systems from intentional or inadvertent access or destruction.
- Facilitates information security and privacy awareness training and mentoring throughout user community, as needed.
|
Responsibilities - Supervisor and/or Leadership Exercised: |
|
None.
|
Knowledge, Skills, and Abilities: |
|
Must possess required knowledge, skills, abilities, and experience and be able to explain and demonstrate, with or without reasonable accommodations, that the essential functions of the job can be performed.
- Knowledge of Information Technology (IT).
- Knowledge of security and privacy.
- Knowledge of technical and management report writing procedures and techniques, including appropriate grammar, spelling, and diction.
- Skill in handling multiple tasks and prioritizing.
- Skill in working with the Microsoft Office and other business applications.
- Skill in oral and written communication.
- Skill in planning and organizing.
- Skill in data analysis, problem solving, and critical thinking.
- Ability to communicate clearly and effectively.
- Ability to work and collaborate in a team environment
- Ability to take initiative and seek innovative solutions.
- Ability to perform tasks with limited guidance and supervision.
- Ability to establish and maintain effective working relationships with City personnel, vendors, and contract service providers.
- Ability to cooperate with others by sharing information, presenting ideas and concerns, and answering questions.
- Ability to perform routine information security, risk, and privacy analysis and reviews.
- Ability to develop clear and concise reports.
- Ability to gather relevant information and document results effectively by identifying the objective, scope, source, results, and conclusions.
- Ability to effectively perform assignments within agreed upon deadlines.
- Ability to develop and understand data, documents, and reports.
|
Minimum Qualifications: |
|
- Graduation with a Bachelor’s degree from an accredited college or university in a related field, plus two (2) years of related experience.
- Graduation with a Master’s degree from an accredited college or university may substitute for experience up to two (2) years.
- Experience may substitute for education up to four (4) years.
- Industry certifications may be considered as a substitution for education up to two (2) years.
|
Licenses and Certifications Required: |
|
None.
|