IT Security Administrator

City of Bloomington Illinois•Bloomington, IL

1d•Onsite

About The Position

The IT Security Administrator is responsible for owning, operating, and continually improving all aspects of the city’s information security program. As the sole dedicated security role, this position manages day-to-day operation of existing security systems, leads the planning and implementation of new security technologies, policies, processes, and baselines, and maintains an up-to-date understanding of the city’s security posture. The role also leads security incident response activities, supports business continuity and disaster recovery planning, and helps ensure compliance with applicable City policies, industry best practices, contractual requirements, and applicable laws and regulations.

Requirements

Knowledge of security best practices and industry standards.
Experience with Cisco DNA Center/FirePower next-gen firewall.
Strong understanding of IP, TCP/IP, and other network administration protocols.
Strong technical knowledge of client endpoint operating systems.
Strong technical knowledge of current client hardware, protocols, and standards.
Extensive application support experience with various Windows-based products.
Proven experience in IT infrastructure planning and development.
Ability to understand organizational goals and align information security priorities with operational and business needs.
In-depth knowledge of applicable data privacy practices and laws.
Strong understanding of project management principles.
Excellent written and oral communication skills.
Excellent interpersonal skills.
Highly self-motivated and directed.
Keen attention to detail.
Exceptional customer service orientation.
Extensive experience working in a team-oriented, collaborative environment.
Strong desire for continued educational opportunities.
Ability to conduct and direct research into IT issues and products, as required.
Effectively troubleshoot hardware and software issues to determine the best corrective action.
Present ideas in business-friendly and user-friendly language to all levels.
Proven analytical, evaluative, and problem-solving abilities.
Effectively prioritize and execute tasks in a high-pressure environment.
Bachelor's degree in cyber security, or related field, from an accredited college or Graduation from high school followed by at least 5 years of cyber security-related experience or Equivalent combination of training, education, and experience may be considered

Nice To Haves

CompTIA Security+
GIAC Information Security Fundamentals (GISF)
Fortinet NSE Level 2
ITIL Foundation v4

Responsibilities

Develop, maintain, and communicate the organization’s information security roadmap alongside the Infrastructure Manager, and with other Infrastructure Division staff members, as it relates to their areas of responsibility.
Continuously assess current-state security posture and define desired future-state maturity.
Recommend security enhancements based on risk assessments, vulnerability assessments, threat intelligence, and emerging technologies.
Participate in strategic IT planning to ensure security considerations are embedded in all initiatives.
Establish and maintain information security policies, standards, and procedures.
Conduct security risk assessments and present findings to IT leadership.
Leads the planning and design of enterprise security architecture, under the direction of the Infrastructure Manager, or IT Leadership Team where appropriate.
Leads the development and maintenance of the City's information security incident response plan and collaborates with appropriate City and IT staff on business continuity and disaster recovery planning.
Evaluate, select, and implement security tools and technologies aligned with organizational needs.
Lead deployment and configuration efforts for new security systems, ensuring minimal disruption and maximum effectiveness.
Collaborate with infrastructure, enterprise, and operations team members to integrate security controls into new and existing systems.
Develop and maintain documentation related to new and existing systems, architecture, and processes.
Manage relationships with security vendors, service providers, and consultants.
Maintains up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
Monitor and manage daily operations of all in-place security systems including firewalls, endpoint protection, identity and access management, intrusion detection/prevention, logging/monitoring platforms, and vulnerability management.
Perform ongoing vulnerability scans, log analysis, and threat detection activities.
Lead incident response efforts including identification, containment, eradication, recovery, and post-incident reviews.
Develops and maintains IT disaster recovery and cybersecurity incident response plans and collaborates with City leadership and departments on broader business continuity planning.
Ensure secure configuration management and patching practices across all systems.
Conduct regular security awareness training and serve as the internal point of contact for security-related issues.
Prepare and present regular reports to IT leadership regarding security risks, incidents, vulnerabilities, trends, mitigation activities, and overall security posture.
Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).
Provide on-call support for end users for all in-place security solutions.