Chief Information Security Officer

CISO Position

In order to be considered for the position, candidates must be a current city employee and be serving permanently in the title of certified IT administrator (LAN / WAN) or have taken the most recent certified IT administrator (LAN / WAN) civil service exam and be reachable for appointment from the recruiting list. The CISO is responsible for maintaining an information risk management and cybersecurity program for the New York City Deferred Compensation Plan (the Plan). The CISO will work with all areas of the Plan's business to develop a "best in class" information security and compliance program to assess appropriate technology platform risks and protect Plan information assets. As such, the CISO acts as an advisor to the Plan's CIO regarding the Plan's compliance with the Citywide Information Security Policies. Responsibilities include strategy, architecture, solutions design, program coordination and execution, awareness, outreach, business management, and reporting on information security program effectiveness. This position requires a seasoned leader with strong business acumen and detailed working knowledge of information security technologies, practices, policies, and their application to a business. CISO should research and offer innovative solutions and improvement of existing procedures. The CISO is an implementer who possesses the poise and ability to act calmly and competently in high-pressure, high-stress situations. This role is responsible for developing and managing strong strategic relationships within IT. Ensuring projects, initiatives, and security platforms meet all required standards. Duties and responsibilities include, but are not limited to the following :

• IT & Cyber Security Risk Management
• CISO Program Governance & Management
• Cyber Security Operations / Activities

Minimum Qualifications

Professional / vendor certification(s) in local area network administration that is required for the position to be filled. In addition, all candidates must have the following : 1. A baccalaureate degree from an accredited college, and two years of satisfactory full-time (not classroom based) experience in local area network and / or wide area network planning, design, configuration, installation, implementation, troubleshooting, integration, performance monitoring, maintenance, enhancement, and security management; or 2. A four-year high school diploma or its educational equivalent and six years of satisfactory full-time (not classroom based) information technology experience of which at least 2 years must have been as described in "1" or 3. A satisfactory equivalent of education and / or experience equivalent to "1" or "2" above. Education may be substituted for experience on the basis that 30 undergraduate semester credits from an accredited college is equivalent to 6 months of experience. A master's degree in computer science or a related field from an accredited college may be substitute for one year of experience. However, all candidates must have at least one year of satisfactory (not classroom based) full-time information technology experience as described in "1" above.

Preferred Skills

Minimum of 6 years' experience managing information security programs, developing and applying information security, risk management, and privacy practices in local, state, or federal government. Minimum of 6 years practical experience designing and implementing IT security solutions deep understanding of various security threats and preventative measures. Familiarity with cyber-security frameworks such as NIST, CIS Controls, PCI-DSS, CCM etc. Strong demonstrated knowledge of LAN / WAN, systems administration, active directory, PowerShell, group policy, virtualization, cloud and IT security technologies. Experience with systems access management, change management, security monitoring and intrusion detection, vulnerability management, endpoint security management, cloud security, data loss prevention, encryption, network security, disaster recovery, data management, physical security, vendor management. Experience with CrowdStrike, McAfee, Pulse Secure, Cisco, firewalls, Windows Server, Rapid7, MS Office 365, Endpoint Security and Enterprise Mobility in the cloud. IT certifications (1 or more) such as Security+, CISSP, CISA, CISM, CySA+, CRISC, C-CISO, SSCP, CASP, CEH, GIAC.

55a Program

This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.

Public Service Loan Forgiveness

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education's website at https : / / studentaid.gov / pslf / .

Residency Requirement

New York City Residency is not required for this position.

Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.