Security Operations Center Manager

Security Operations Center Manager

Subject to management approval, serves as the Security Operations Center Manager for the Department of Innovation & Technology (DoIT) and as a technical leader for divisional and agency initiatives possessing independent authority to commit and allocate resources and planning and implementing the modifications needed for Security Information Systems and Event Monitoring (SIEM) Systems.

Formulates and implements policies, standards, procedures and playbooks for the Security Operation Center, manages all aspects of forensics and chain of custody, and assists in e-discovery processes.

Creates mitigating procedures for addressing threat vectors including Advanced Persistent Threat (APT), Distributed Denial of Service (DDOS), Phishing, Malicious Payloads and malware and develops documentation for management, including policies and procedures and implementing policies per agency and industry standards.

Serves as full line supervisor : coordinates and consults with customers, staff, vendors, etc., regarding SOC issues, policies, standards and procedures and develops rolling SOC program related documents and incorporates security technology plans and priorities.

Keeps abreast of new developments, industry best practices, standards, approaches, tools and techniques as propagated by International Standards Organization, Information Technology Infrastructures Library, National Institute of Standards and Technology and other governing and certification bodies such as ISC2, Information Systems Audit and Control Association by continuing education through online training platforms, meetings, training sessions, seminars, and conferences to increase familiarity with and remain current on products, vendors, techniques, and procedures.

Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.

Minimum Qualifications : Requires knowledge, skill, and mental development equivalent to completion of four (4) years of college with coursework in management information systems, data processing, telecommunications or directly related Information Technology field. Requires prior experience equivalent to four (4) years of progressively responsible administrative experience in a public or private business Information Technology organization. Requires three (3) years of professional experience supervising a team of Information Technology professionals in a large and highly complex public or private IT organization.