Information Technology Security Administrator

City of North Port•North Port, FL

About The Position

The Information Technology Security Administrator is a hands-on role that requires a high level of technical expertise. This position is responsible for the strategy, design, specification, and implementation of the Information Security Program and associated policies. The role provides guidance and oversight of operational and system security controls, and direction and coordination to City and IT staff for security incidents. It performs risk management functions including risk assessment, identification of mitigation and remediation requirements, and provides oversight of security issues resolution including tracking and escalations. The role assists with the coordination and management of security awareness training, business continuity, and disaster recovery plans, and provides direction and oversight of the Incident Response processes. The Information Technology Security Administrator works directly with IT and City staff to identify opportunities for improved security tools and processes.

Requirements

Minimum of five (5) years of IT or network security experience
Bachelor's degree in information systems, computer science, or equivalent work experience (A comparable amount of relevant training, education and/or experience may be substituted for the above qualifications.)
Knowledge of Information Security programs including, but not limited to, program development, policy management, audit reviews, risk assessment, awareness and training, identity and access management, data protections, secure SDLC, incident management, vulnerability assessment, penetration testing, third-party assessment, security configurations and patch management.
Experience in developing, documenting, and maintaining security procedures.
Knowledge of risk management concepts and solid understanding of IT general control and information security principles.
Solid understanding of industry-recognized compliance/risk frameworks such as NIST 800-53, NIST Cybersecurity Framework (CSF), ISO 27001, CIS Top 20 Controls, and OWASP.
Proven ability to work under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously.
Ability to work well under minimal supervision.
Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT-business personnel.
An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative and actionable manner.
Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience and build long-term relationships.
Self-motivated and possessing a high sense of urgency and personal integrity.
Technical expertise in network security knowledge, to include VPN, routers, firewall, network monitoring, intrusion detection, web server security and wireless security, cloud, OT, the Internet of Things (IoT), and associated network protocols and concepts.
Practical experience with database security, content filtering, vulnerability scanning and anti-malware.
Proficiency with at least one scripting language (e.g., Perl, Python and PowerShell).
Strong knowledge of common vulnerabilities and exploitation techniques.
Direct, hands-on experience or a strong working knowledge of vulnerability management tools.
Direct, hands-on experience or strong working knowledge of managing security infrastructure — e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology.
Possession of or ability to obtain a valid Florida driver’s license by date of hire.
Will be required to submit to a State and National Criminal Background Investigation.

Nice To Haves

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Security (CRISC), or other security certification preferred

Responsibilities

Performs system security administration on designated technology platforms, including operating systems, applications, and network security devices, in accordance with the defined policies, standards and procedures of the organization, as well as with industry best practices and vendor guidelines.
Defines, implements, and maintains information security policies including ongoing improvements and processes for exceptions and/or non-compliance.
Designs and implements a risk assessment strategy to include identification, mitigation options, remediation requirements, tracking and management reporting.
Performs threat and vulnerability assessments, in some cases followed by appropriate remedial action, to ensure that systems are protected from known and potential threats and are free from known vulnerabilities.
Responds to and reports unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
Develops and maintains documentation for security systems and procedures.
Researches, designs, recommends, evaluates, and implements cybersecurity solutions that identify and/or protect against potential threats.
Develops, reviews, implements, and maintains a security awareness program to mitigate human risks present in the City’s extant operating environment.
Works with IT Manager and staff to ensure accountability for their controls and understanding of their responsibilities for risk mitigation and remediation as well as compliance to security policies.
Focuses on process improvement to manage risk, proactively prevent problems, and identify opportunities for efficiencies and automation.
Ensures employees and third parties understand, acknowledge, and fulfill all applicable information security policies.
Investigates and resolves security violations by providing postmortem analysis to illuminate the issues and possible solutions.
Participates in infrastructure projects to develop, plan, and implement specifications for network and distributed system security technologies in support of key information systems.
Implements or coordinates remediation required by audits, and document exceptions as necessary.
Recommends, schedules and/or applies fixes, security patches and any other measures required in the event of a security breach.
Assists with system and application vulnerability and penetration testing.
Monitors security vulnerability information from vendors and third parties.
Develops and oversees the risk register and tracking of open issues requiring remediation.
Participates in cybersecurity working groups.
Serves as subject matter expert regarding information security protocols, methodologies, risk management and effective control solutions.
Works with IT and internal and external business partners to ensure that security is factored in the evaluation, selection, installation and configuration process of hardware and software.
Every City employee has emergency response responsibilities, though not every position will require routine assignments during an emergency event. All employees are subject to recall around the clock for emergency response operations, which may require irregular work hours, work at locations other than the normal work location, and may include duties other than those specified in the employee's official job description. Assignments in support of emergency operations may be extensive in nature, with little advance notice, and may require employees to relocate to emergency sites with physically and operationally challenging conditions.