APPLY NOW!
Job title: Information Technology Specialist 4 (Information Security) Ref #18588R
Company: Department of Homeland Security
Job description: Minimum Qualifications bachelor’s degree* with at least 15 credit hours in cyber security, information assurance, or information technology; and three years of information technology experience, including two years of information security or information assurance experience**.
*Substitution: bachelor’s degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor’s degree on a year-for-year basis; an associate’s degree requires an additional two years of general
information technology experience.
**Experience solely in information security or information assurance may substitute for the general information technology experience.
Preferred Qualifications:
- Bachelor’s Degree with a concentration or major in Information Security, Cyber Security, Digital Forensics, Information Assurance, or a related field
- Applicable Information Security certificate(s), including but not limited to:
o Certificate in Information Security Fundamentals (e.g., Security+, GSEC, CISF, GISF)
o Certified Information Systems Security Professional (CISSP)
o Certificate in Information Security Management (e.g., GSLC, GSTRT, GCEIT, CISM, CCISO)
o Certificate in Information Security Risk Management (e.g., CRISC, CAP, GCCC, CCSLP)
- Working knowledge of:
o computer networks, intrusion detection systems, routers, firewalls, operating systems, network vulnerability assessments, web application vulnerability assessments, computer programming and scripting
o government security and privacy mandates/regulatory compliance (e.g., HIPAA, PCI, IRS Pub 1075, CJIS)
o Information Security (CIA triad, Information Classification, Risk Management, Incident Response, Vulnerability Management, Security Architecture & Engineering)
o Information Security Frameworks (NIST Cyber Security Framework, CIS Controls, ISO 2700 series)
- 3+ years’ experience in technical writing
- 2+ years’ experience in the following areas:
o applying and implementing network and/or system security
o information security incident response
o security policy/standard/guideline development, implementation, or interpretation
o conducting risk assessments and evaluating information technology systems for security controls (SSDLC)
o compliance assessments, audit support/response, and compliance/audit remediation
- 1+ year experience leading an information security team
- Excellent oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding
- Demonstrated critical thinking, problem solving and analytical skills
- Demonstrated skill in facilitating meetings, listening, and negotiating between multiple stakeholders to drive results
Duties Description Under the direction of an Information Security Officer, Manager Information Technology Services 1, SG-27, within the Chief Information Security Office, Integrated Security Services, Security Services Team the position will be a member of a Security Services Team that provides security services to one or more ITS Portfolios and their client agencies. The incumbent will supervise subordinate staff and act as a senior team member providing in-depth information security consulting and services aligned with business needs of the client agencies to ensure confidentiality, integrity, and availability of information and systems.
Although the position operates under the general direction of an Information Security Officer, the incumbent must be able to operate with a great deal of independence. The incumbent’s work must conform to policy and technical standards set by the Chief Information Security Office and ITS management.
The position requires communicating orally and in writing with various individuals including management, users, vendors, and other IT staff. The incumbent must be able to communicate clearly with subordinate staff regarding work priorities and performance. The incumbent will have to work with ITS teams and upper-level agency management to resolve technically complex and politically sensitive issues under pressure.
The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.
Specific duties include, but are not limited to:
- Serve as information security expert, and evaluates systems and contracts for alignment with agency and State information security policies:
o Act as information security liaison to agency and portfolio staff, maintaining close relationships to ensure security services align with business needs;
o Provide information security expertise to information security staff, ITS, and ITS-served agencies on a broad range of information security standards and best practices;
o Act as Information Security Lead on ITS Projects and Initiatives to ensure security by design through implementation of the Secure Systems Development Lifecycle (SSDLC);
o Review the current and proposed architectures to meet security requirements for portfolio-served agencies;
o Participate in the preparation and evaluation of RFP’s for portfolio-served agencies;
o Assist subordinate staff with technical and security issues as necessary;
o Develop and maintain familiarity with client agency business functions and requirements;
o Develop and maintain expertise in cyber security compliance domains including, but not limited to, FISMA, NIST SP 800-53 and other 800 series guidelines, IRS Pub 1075, PCI DSS, HIPAA, HITECH;
o Develop and maintain expertise in cyber security frameworks including, but not limited to, CIS Top 20 CSC, NCSF, and ISO/IEC 27000 series.
- Manage and resolve security threats to agency information systems:
o Implement information security incident response plans, and reports;
o Coordinate response to potential security incidents;
o Escalate security concerns and report incidents to the applicable entities for review and action.
- Manage and implement information security and compliance programs:
o Participate in the development, interpretation, review and communication of NYS information security policies, procedures and standards;
o Analyze the impact of proposed policy and legislation as they pertain to information systems and makes recommendations as appropriate;
o Participate in development, deployment and maintenance of procedures in accordance with State and agency information security policies and standards. Monitors compliance and takes appropriate action as needed;
o Implement Security Service Team’s information security risk management program;
o Write progress reports to management and users outlining what was done, what needs to be done and timeframes for accomplishing tasks.
- Supervise staff and resources dedicated to the Security Services Teams:
o Perform all supervisory responsibilities including, but not limited to, assigning work, writing performance and probationary evaluations, conducting interviews, and hiring staff.
- Monitor and stay aware of information security industry trends, tools and techniques:
o Represent the agency at internal and external information security meetings and conferences to maintain awareness, and evaluates the applicability of the latest information security techniques and tools to the agency’s security program;
o Collaborate with peers to develop a multilayered and adaptive approach to counter a dynamic information security threat environment;
o Research relevant laws and regulations in consultation with agency counsel that could affect the security controls and classification of information assets and approves adjustments to meet legal and regulatory requirements.
- In addition:
o Maintain an adequate level of current knowledge and proficiency in information security through annual Continuing Professional Education (CPE) credits directly related to information security;
o Perform additional duties as required.
Additional Comments Approval to fill this position is pending with Division of the Budget (DOB). Background check and fingerprinting are required.
Some positions may require additional credentials or a background check to verify your identity.
Expected salary: $81446 – 102661 per year
Location: Albany, NY
Job date: Wed, 30 Jun 2021 00:45:37 GMT
APPLY NOW!
[ad_2]
