Manager Information Technology Services 1 Infomation Security - 9471

State of New York•Albany, NY

26d•$106,898 - $131,665

About The Position

Under the direction of the Deputy Commissioner for Technology within the Dedicated Workforce Team (Sector C), the Manager Information Technology Service 1 Information Security (MITS1 IS), SG-27, will lead the Security Services Team that provides security services to the Department of Civil Service, Office of Employee Relations, and Public Employee Relations Board (Sector C). The incumbent will lead their team in providing in-depth information security consulting and services aligned with business needs of the client agencies to ensure confidentiality, integrity, and availability of information and systems. The position requires the incumbent to act with a great deal of independence in alignment with agency and upper-level management strategic direction including communicating orally and in writing with various individuals including management, users, vendors, and other Information Technology (IT) staff. The incumbent must be able to communicate clearly with subordinate staff regarding work priorities and performance and will have to work with ITS teams and upper-level agency management to resolve technically complex and politically sensitive issues under pressure. The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, and New York State agencies, including the Office of Information Technology Services (ITS). HIPAA Security/Compliance Officer - Given our handling of PHI and ePHI, compliance with the HIPAA Act security regulation is not merely a best practice but a legal mandate. Failure to adhere to HIPAA regulations carries severe financial penalties and legal repercussions. A Dedicated HIPAA Security Officer will produce the essential expertise, oversight, and strategic direction to ensure robust ePHI security, mitigate risks, and maintain continuous compliance, thereby safeguarding our clients and organizations viability.

Requirements

Minimum Qualifications Non-competitive: Seven years of information technology, cybersecurity, or information assurance experience, including one year at the supervisory level.
Substitutions: A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor's substitutes for two years of required experience.
An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor's degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience.
A master's degree or higher in computer science or related field substitutes for one year of required experience

Nice To Haves

Applicable Information Security certificate(s) such as CISSP, CISM, etc.
Experience in one or more of the following areas: Leading an information security team Applying and implementing network, system, or application security Security policy/standard/guideline development, implementation, or interpretation Conducting risk assessments and evaluating information technology systems for security controls (SSDLC) Process development, improvement, and measurement Information security incident response
Excellent oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding
Demonstrated critical thinking, problem solving and analytical skills
Demonstrated skill in facilitating meetings, listening, and negotiating between multiple stakeholders to drive results

Responsibilities

Manages and implements information security and compliance programs.
Manages and resolves security threats to agency information systems.
Serves as information security expert and evaluates systems and contracts for alignment --with agency and State information security policies.
Supervises staff and resources dedicated to the Security Services Teams.
Monitors and remains aware of information security industry trends, tools, and techniques.
Performs additional duties as required.

Benefits

Thirteen (13) paid holidays annually
Up to Thirteen (13) days of paid vacation leave annually
Up to Five (5) days of paid personal leave annually
Up to Thirteen (13) days of paid sick leave annually for PEF.
Up to three (3) days of professional leave annually to participate in professional development
Eligible employees and dependents can pick from a variety of affordable health insurance programs
Family dental and vision benefits at no additional cost
New York State Employees' Retirement System (ERS) Membership
NYS Deferred Compensation
Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
Public Service Loan Forgiveness (PSLF)