Cybersecurity Architect

City of Eugene • Eugene, OR

2d • Hybrid

About The Position

The City of Eugene is hiring a Cybersecurity Architect in its Central Services/Information Services Division. The role develops and maintains the City’s cybersecurity architecture, strategy, policies, standards, and operational procedures, using the NIST Cybersecurity Framework and ensuring compliance with requirements such as CJIS, HIPAA, PCI, and applicable state cybersecurity mandates. It evaluates emerging threats, vulnerabilities, technologies, and risks, and participates in the Information Services Division Architectural Review Board.

The position directs daily security operations and manages security tools and platforms, vulnerability management, and incident response. It leads incident handling from triage through post-incident analysis, supports business continuity and disaster recovery, and coordinates response efforts across departments and agencies.

The Cybersecurity Architect also manages the security program budget and team, leads employee security awareness and training, collaborates with IT and public safety partners, and prepares technical reports, briefings, audit responses, and budget requests for executive leadership and City Council. The position is hybrid, with at least two in-office days each week at City Hall in Eugene, Oregon. The employee must live within 45 minutes of City Hall. The regular schedule is Monday through Friday, 8:00 a.m. to 5:00 p.m., with flexibility based on business needs; on-call duties, emergency response, and occasional evening or weekend work may be required during major incidents or system upgrades.

Requirements

• Bachelor’s degree in information security, computer science, information technology, or a closely related field, or an equivalent combination of education and experience that provides the required knowledge, skills, and abilities.
• Six years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems.
• Two years in a supervisory or leadership role.
• Ability to acquire and maintain CJIS certification within 90 days of hire.
• Must pass a CJIS background check before the start date, including providing fingerprints and personal information and signing an authorization form.
• Must live within 45 minutes of City of Eugene City Hall.
• Ability to work the stated Monday–Friday schedule with flexibility based on business needs, and to undertake potential on-call and emergency-response duties and occasional evening or weekend work during major incidents or system upgrades.

Nice To Haves

• Master’s degree in cybersecurity, IT management, or a related field.
• Experience working in public-sector or municipal IT environments.
• Professional certifications such as CISSP, CISM, CEH, Security+, or equivalent.
• Fluency in an eligible language and passing the City’s language proficiency test for bilingual pay.

Responsibilities

• Create and manage cybersecurity architecture aligned with the NIST Cybersecurity Framework.
• Create or advise on cybersecurity policies, and maintain the City’s cybersecurity strategy, policies, standards, and operational procedures.
• Track emerging threats, vulnerabilities, and technology trends relevant to municipal IT environments, and evaluate future technologies and risks from a cybersecurity perspective.
• Participate in the Information Services Division Architectural Review Board for new or emerging technology changes.
• Scope, evaluate, implement, configure, and manage security tools to support the City’s cybersecurity architecture and defensive posture.
• Ensure compliance with CJIS, HIPAA, PCI, and applicable state cybersecurity mandates.
• Conduct recurring security audits and risk assessments and produce prioritized risk-mitigation recommendations.
• Support business continuity and disaster recovery strategies and integrate cybersecurity requirements.
• Direct daily security operations, including real-time monitoring, intrusion detection, SIEM, security log analysis, and identification of anomalous activity.
• Manage vulnerability scanning, configuration assessments, and remediation coordination with infrastructure and application teams.
• Oversee deployment, tuning, and lifecycle management of firewalls, IDS, IPS, SIEM, and endpoint protection solutions.
• Lead the incident-response lifecycle, including triage, containment, eradication, forensic investigation, evidence collection, remediation guidance, and post-incident analysis.
• Coordinate cross-departmental incident response and incorporate findings into policy updates and improved security controls.
• Maintain incident-response plans and test them through tabletop exercises or coordinated penetration testing.
• Manage the security program budget and prioritize tools and staff resources to align with the budget.
• Lead the security team, including personnel management, skills development, and resource allocation.
• Work with IT teams, public safety partners, and external agencies to maintain secure system operations and interagency interoperability.
• Lead cybersecurity awareness initiatives and training programs for City employees.
• Prepare briefings, technical reports, audit responses, budget requests, and updates for executive leadership and City Council.
• Actively support and respect workplace diversity; complete assigned duties and projects and work cooperatively toward team, department, and City goals.
• Demonstrate employee engagement, accountability, coachability, and responsibility for personal performance and results.

Benefits

• Bilingual pay of up to 5% of base salary for qualifying employees.
• Upon eligibility, City contribution of an employee contribution of 6%, as well as the employer contribution, to an Oregon PERS-administered retirement program.
• City contribution of 3% to a deferred compensation program if the employee contributes at least 1%.
• Robust and competitive benefits are offered; specific benefits are referenced in the Benefits Tab and benefits summaries.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior