Information Security Officer UN

City of Albuquerque•Albuquerque, NM

8d•Onsite

About The Position

The Information Security Officer (ISO) will play an integral role in the development, implementation, compliance and management of information security strategies and efforts across the City of Albuquerque. The ISO will perform complex, high level technical duties for the City's technological system to mitigate and reduce vulnerabilities and cyber breaches utilizing existing and emerging technology tools and trends. Tasked with managing cyber security strategies, continuity planning and evaluating compliance standards to improve and protect the City's technological security, efficiency and effectiveness. This is an unclassified at-will position. Job descriptions are intended to present a general list of tasks/duties performed by employees within this job classification. Job Descriptions are not intended to reflect all duties performed within the job.

Requirements

Bachelor's degree from an accredited college or university in computer science, cyber security, or information technology
Five (5) years of experience in information technology, information security, or application security engineering
Two (2) years in a senior leadership role in information security
Must obtain a Certified Information Systems Security Professional (CISSP) or Certified Chief Information Security Officer Certification (CCISO) within one (1) year from date of hire.
Possession of a valid New Mexico Driver's License, or the ability to obtain by date of hire.
Possession of a City Operator's Permit (COP) within 6 months of date of hire.

Responsibilities

Manage, investigate and address issues surrounding cybersecurity incidents timely and effectively; provide solutions driven responses to mitigate and manage future attacks.
Evaluate existing security infrastructure and implement industry standard and emerging security tools to monitor and investigate threats, attacks, and trends.
Lead teams in implementing remediation of detected vulnerabilities to maintain high level security standards.
Develop and implement actionable solutions to complex technology problems or issues involving the City's information security.
Research, develop and incorporate applicable standards, operating procedures, policies, and controls for department and city information security directives.
Provide the most update to date information pertaining to technology trends and security standards; provide recommendations to management.
Conduct independent tests/scans to the operating systems, applications, networks, and databases using the appropriate vulnerability/compliance verification tools; continuously monitor and review technical inspections.
Manage, direct and oversee projects focused on enterprise information security.
Direct and lead inter-departmental teams in technical services, computer security, enhancing awareness to actively remedy security issues and concerns.
Conduct IT briefings, participate in inspections and audits; to include recommendations for networks, infrastructure, application security services in compliance with city policies and processes.
Support efforts for vulnerability/risk assessment analysis and plans, to increase stability and control current IT system and software
Design, build and deploy vulnerability management frameworks and technologies.
Develop and manage security awareness training and testing.
Provide after-hour/off-hour assistance with little notice, to remedy, control, repair vulnerabilities or breaches, or potential issues
Stay abreast of new and emerging technology trends and security standards; incorporate new developments as appropriate.
Attend and participate in professional group meetings; stay abreast of new trends and innovations related to assigned area of responsibility
Perform related duties and responsibilities as required.