Deputy Commissioner and Chief Information Security Officer

City of New York • New York City, NY

1d • Onsite

About The Position

The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City. From delivering affordable broadband to protecting against cybersecurity threats and building digital government services, OTI is at the forefront of how the City delivers for New Yorkers in the 21st century. Watch our welcome video to see our work in action, follow us on social media @NYCOfficeofTech, and visit www.nyc.gov/oti to learn more. At OTI, we offer great benefits, and the chance to work on projects that have a meaningful impact on millions of people. You'll have the opportunity to work with cutting-edge technology and collaborate with other passionate professionals who share your drive and commitment to making a difference through technology. Cyber Command is charged with protecting all City systems against cyber threats, including systems that deliver vital services to New Yorkers. Headed by the Chief Information Security Officer of the City of New York, we provide in-depth support to over 100 agencies and offices to protect, detect, identify, respond to, and recover from cyber threats. Reporting directly to the Chief Technology Officer (CTO), the Deputy Commissioner and Chief Information Security Officer (CISO) oversees all aspects of information security risk management, governance, and compliance. In addition, the CISO is responsible for ensuring that information security system architecture (including passive and active defense systems) is aligned with OTI goals and objectives, and directs the Cyber Threat Intelligence component.

Requirements

• 1. A baccalaureate degree from an accredited college and four years of progressively more responsible, full-time, satisfactory experience using information technology in computer applications programming, systems programming, computer systems development, data telecommunications, database administration, planning of data/information processing, user services, or area networks, at least 18 months of this experience must have been in an executive, managerial, administrative capacity in the areas of computer applications programming, systems programming, computer systems development, data telecommunications, data base administration, or planning of data processing or in the supervision of staff performing these duties; or
• 2. Education and/or experience equivalent to "1" above. However, all candidates must have at least a four-year high school diploma or its educational equivalent approved by a State's department of education or recognized accrediting organization and must possess at least three years of experience as described in "1" above, including the 18 months of executive, managerial, administrative or supervisory experience as described in "1" above.

Responsibilities

• In cooperation with organizational executive leadership, direct the development of an effective strategy to assess and mitigate information security risk, manage information security incidents, and maintain continuity of operations in the event of a security incident.
• Direct staff in identifying, developing, implementing, and maintaining security processes, practices, and policies throughout the organization to defend against attacks on OTI data and information assets, identify and respond to information security incidents, and limit exposure and liability in all areas of information security risk.
• Ensure compliance with relevant information security policies, regulations, and legal requirements.
• Research and deploy technology solutions and innovative management techniques to safeguard the organization's data and information assets.
• Establish appropriate standards and associated risk controls.
• Develop and maintain relationships with officials in other NYC agencies, local and federal law enforcement, intelligence, and other relevant governmental functions as well as private sector counterparts worldwide.
• Prioritize annual information security initiatives to meet Department (and City) goals and objectives.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Number of Employees: 5,001-10,000 employees