Lead I.T. Security Specialist

Cucamonga Valley Water District•Administration, CA

17h•Onsite

About The Position

Join a team of dedicated professionals who help protect the systems that support one of our community's most essential resources: water. Cucamonga Valley Water District (CVWD) is seeking a skilled and strategic Lead IT Security Specialist to lead and implement IT and cybersecurity best practices and strategies, while strengthening our security posture and safeguarding the technology that powers reliable water services. If you're an experienced IT professional with strong leadership skills and a passion for protecting mission-critical systems, we'd like to hear from you. Join us in securing the technology that helps deliver safe, reliable water to our community.

Requirements

Ability to communicate and present security risk concisely and effectively (written, oral, and presentation).
Demonstrated leadership and problem-solving skills.
Ability to manage effectively and work closely with business leaders in a high-pressure, fast-paced, highly collaborative environment with multiple deadlines and competing priorities.
Proven knowledge of security architecture design, network security, vulnerability management, and threat intelligence analysis.
Experience in security, operations, control assessment, risk management, auditing, and/or internal controls.
Experience with security and privacy, legal, and regulatory requirements.
Knowledge of common information security management frameworks, such as NIST, CIS, ISO 27001, COBIT, or PCI DSS.
Strong understanding of encryption, security certificates and advanced authentication measures.
Strong understanding of networking concepts and protocols (e.g., TCP/IP, LAN, WAN, DHCP, DNS, routing protocols).
Expert-level knowledge of security systems such as SIEM, IPS firewalls, and related network security tools.
Experience with operating systems such as Windows, Unix, Apple, SQL, Azure, and Oracle databases.
Experience with Industrial Control Systems software such as Siemens, Wonderware, and similar platforms.
Five (5) years of progressive experience operating personal computer operating systems, word-processing and spreadsheet software; database application design and development; installing and maintaining personal computer hardware and software; and programming and systems analysis experience; installing and troubleshooting networks, Windows server operating systems, Microsoft Exchange/365, Active Directory, and networked equipment, including fiber optics.
Five (5) years of experience administrating, configuring, maintaining, and upgrading LAN/WAN hardware and operating systems.
Possession of a Bachelor's Degree in Information Technology, Computer Science, Management Information Systems, or related fields.
Certifications in Information Technology, Networking, or Systems Administration with an emphasis on IT security.
Possession of a certification in administrative network equipment, such as Cisco Certified Network Associate (CCNA) or Cisco Certified Network Professional (CCNP).
Possession of a valid California Class C driver's license and a satisfactory driving record.
Ability to analyze and resolve application problems, as well as software and hardware integration.
Ability to apply technology to provide business solutions.
Ability to work effectively with clients, peers, and support teams to ensure that tasks are completed accurately and in a timely manner.
Ability to communicate effectively both orally and in writing.
Ability to evaluate and select hardware and software and work effectively with vendors to integrate solutions.
Ability to analyze and resolve complex problems, including applications and software integrations.
Ability to work effectively with peers and support teams to define business requirements, provide support for software, hardware, and applications, and ensure that tasks are completed accurately and in a timely manner.
Ability to design systems that meet defined requirements and document system design for development, implementation, testing, and client use.
Ability to research potential solutions, make implementation recommendations, and apply technology to provide business solutions.
Ability to develop solutions and recommend technology to provide target business outcomes.
Ability to establish and maintain effective working relationships with those contracted during the course of the work and project.
Ability to maintain alert mental capacity that allows the capability of making sound judgments and decisions and demonstrating intellectual capabilities.
Ability to maintain physical condition appropriate to the performance of assigned duties and responsibilities.
Ability to maintain effective audio-visual discrimination and perception needed for making observations, communicating with others, reading, writing, and operating assigned equipment.

Nice To Haves

Certified Information Systems Security Professional (CISSP)
VMware Certified Professional (VCP) Certification.
VMware Certified Technical Associate (VCTA) Certification.
Palo Alto Certified Network Security Administrator (PCNSA) Certification.

Responsibilities

Leading, coordinating, and participating in the analysis, design, and implementation of IT security best practices.
Implementing solutions for Supervisory Control and Data (SCADA), servers, desktops, and cloud infrastructure.
Developing compliance strategies for IT security programs.
Leading the assessment of risks of non-compliance to management policies, procedures, standards, and guidelines and reporting findings to management.
Overseeing, reviewing, analyzing, and coordinating security upgrades and vulnerability management program.
Providing expert technical systems and infrastructure security advice, recommendations, and assistance in the development or implementation of risk-based mitigation plans.
Leading and participating in the technical analysis and correlation of security data/logs to identify potential threats and vulnerabilities or to determine the root cause of a security-related event/incident.
Researching, evaluating, implementing, and recommending security tools, products, platforms, and standards based on industry trends, business requirements, and technical infrastructure.
Monitoring, analyzing, and responding to security events using security-event management tools.
Maintaining awareness and knowledge of current changes within legal, and Disaster Recovery plan activities and may act on his/her behalf in his/her absence if appointed.
Administering system backup and restore, ensuring data integrity for recovery.
Performing systems support functions for servers and network equipment operating in a LAN/WAN environment.
Performing information security risk assessments and risk analysis.
Supporting and handling urgent issues after hours.
Supporting vendors in the maintenance of WAN circuits.
Participating in setting direction for the Information Technology Division.
May be designated to act on behalf of the Information Technology Manager in their absence.
Participating in strategic planning and reporting on budget, disaster planning, and master planning.
Performing maintenance and support of firewalls, routers, network equipment and work with outside vendors supporting these devices.
Performing security assessment/penetration testing for SCADA, infrastructure, applications, databases, and cloud computing.
May be required to participate in the Countywide Cybersecurity Emergency Response Team, Departmental Cybersecurity Emergency Response Team, and Cybersecurity Workgroups.
May supervise IT staff in the performance of security-related assignments.
May be required to represent the department in legal matters related to IT systems security.