Cybersecurity Administrator

City of Gulfport•Gulfport, MS

4d•$62,244 - $70,056•Onsite

About The Position

This position answers to the Director of Information Technology. Responsibilities include for the overall cybersecurity posture of the City of Gulfport. This role leads the implementation, management, and continuous improvement of the City’s cybersecurity program, including threat detection and response coordination, identity and access management, regulatory compliance (including CJIS), data protection, and user security awareness. This position serves as the primary administrator and internal owner of the City’s Managed Detection and Response (MDR) platform and associated security tooling, ensuring proper configuration, monitoring, and response to threats across all systems. The Cybersecurity Administrator works closely with internal IT staff, City departments, law enforcement stakeholders, and external vendors to proactively identify risks, mitigate vulnerabilities, and ensure compliance with applicable standards and regulations. This position is classified as Essential. Essential status is defined as employees whose duties are vital to maintain basic municipal functions during an emergency.

Requirements

Strong knowledge of cybersecurity principles, frameworks and best practices.
Experience with Managed Detection and Response (MDR) platforms and security operations.
Proficiency in identity and access management, including MFA and conditional access.
Understanding of endpoint protection, network security and cloud security concepts.
Knowledge of vulnerability management and risk assessment methodologies.
Familiarity with CJIS security policy and regulatory compliance requirements.
Ability to analyze security events and respond to incidents effectively.
Strong communication skills for working with technical and non-technical stakeholders.
Ability to develop policies, procedures and documentation.
Ability to manage multiple priorities in a fast-paced environment.
Strong analytical and problem-solving skills.
Familiarity with emerging AI security risks, and frameworks and their application in a municipal or law enforcement environment.
Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field. A combination of education and experience can be accepted if applicant does not have a degree, but has coursework completed in computer science, information technology, cybersecurity or related field.
Minimum of 3-5 years’ experience in cyber security, systems administration, or network security.
3-5 years’ experience with security monitoring, incident response, and vulnerability management.
A valid Mississippi Driver’s License.
Will take all required National Incident Management System classes or additional classes as assigned by Director of Information Technology.

Nice To Haves

Experience in a government or regulated environment.
CompTIA Security+
CompTIA SecurityX (formerly CASP+)
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Microsoft Security, Compliance, or Identity certifications
GIAC or equivalent security certifications

Responsibilities

Oversees security operations and threat management, including administering and managing the City’s cybersecurity platform, monitoring, analyzing and responding to security alerts, serving as liaison with MDR provider, conducting investigations, coordinating containment, eradication and recovery efforts during security incidents, and identifying and mitigating AI threats.
Manages incident response and cyber recovery, including leading the City’s cyber security incident response program, developing and maintaining incident response plans, coordinating cross-departmental response efforts, conducting post-incident reviews, implementing corrective action plans, and supporting disaster recovery and continuity planning.
Oversees vulnerability and risk management, including identifying, assessing and prioritizing vulnerabilities, providing cloud security oversight, maintaining a cybersecurity risk register, performing security assessments for new systems, vendors and initiatives, coordinating and managing third-party penetration testing, and conducting follow-up validation.
Manages Identity and Access Management (IAM), including the management and enforcement of Multifaction Authentication (MFA), development and maintenance of conditional access policies and identity security controls, oversight of role-based access control (RBAC), and enforcement of least privilege principles.
Manages Data Protection & Data Loss Prevention (DLP), overseeing logging, monitoring and visibility across critical systems, platforms, network devices, services, and endpoints, and monitoring log integrity, retention and availability.
Ensures compliance with Criminal Justice Information Services (CJIS) security policy, conducting regular audits and assessments, maintaining documentation, and working closely with Police department stakeholders.
Creates and manages a comprehensive cybersecurity awareness program, conducting phishing simulations, providing targeted training, and reporting on training effectiveness.
Oversees security policy and governance, leading the alignment of city security practices with the NIST Cybersecurity Framework (CSF), conducting annual security self-assessments, participating in IT governance and strategic planning initiatives, and providing guidance on secure system architecture and design.
Evaluates and monitors the security posture of vendors and service providers, participating in procurement processes, reviewing vendor security documentation, and coordinating with vendors to remediate identified risks.
Develops and presents regular cybersecurity reports to IT leadership, tracking and reporting KPIs, and providing actionable recommendations.
Serves as the City’s primary point of contact for the Multi-State Information Sharing and Analysis Center (MS-ISAC), developing intelligence & external partnerships, monitoring MS-ISAC advisories, and participating in the Nationwide Cybersecurity Review (NCSR).
All other duties as assigned.