Senior Information Technology Security Analyst

City of Fort Lauderdale•Fl 33301, FL

About The Position

The person in this role designs, implements, and supports a complete Information Security program, consisting of hardware, software, policies and procedures, which ensures the confidentiality, integrity and availability of all information systems in the City of Fort Lauderdale network. This program encompasses many departments such as, Police, Fire, and SCADA networks. Supervises support staff and evaluates operating policies and procedures and makes recommendations to improve security and operating efficiency and productivity. This job classification is included within the bargaining unit represented by Federation of Public Employees and therefore is subject to the terms and conditions of the Collective Bargaining Agreement between the City of Fort Lauderdale and Federation of Public Employees. This is a Management Category II position which includes e ight (8) additional Management Vacation Days and a Vehicle Allowance of $340/month.

Requirements

Bachelor's Degree in Information Technology, Computer Science, Management Information Systems or a related field.
Five (5) to Seven (7) years of experience in the design, implementation, and support of enterprise-wide IT security programs (hardware, software, policies and procedures) including writing and auditing of policy, procedures and standards, and at least one (1) year of supervisory experience.
Additional qualifying experience or completion of coursework at an accredited college or university in a job-related field, may substitute on a year-for-year basis for the required experience or education.

Nice To Haves

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), Certified Cloud Security Professional (CCSP), or other relevant cybersecurity certifications.
Experience with cybersecurity architecture and engineering; vulnerability management; incident response; vendor risk management; cloud security; Microsoft 365 and Entra ID security; email security; endpoint detection and response (EDR/XDR); security information and event management (SIEM) platforms; intrusion detection and prevention systems (IDS/IPS); Active Directory security; disaster recovery (DR) and business continuity planning (BCP); Operational Technology (OT) and SCADA security; and cybersecurity compliance frameworks including CJIS, PCI-DSS, HIPAA, and NIST.

Responsibilities

Designs, implements and supports secure information security architecture for the City of Fort Lauderdale.
Provides cybersecurity governance, risk, compliance, and audit assessments in support of CJIS, PCI-DSS, HIPAA, NIST, and other applicable requirements.
Develops, reviews, and maintains cybersecurity policies, procedures, and standards to meet regulatory requirements and improve security and operational effectiveness.
Serves as a technical lead for cybersecurity initiatives by coordinating project activities and providing cybersecurity subject matter expertise.
Leads project implementation with large groups of people from varying departments.
Evaluates the cybersecurity impact of proposed projects and initiatives on the City's technology environment.
Researches emerging threats, vulnerabilities, and attack techniques and evaluates their potential impact on the City's technology environment.
Supports cybersecurity awareness initiatives and provides security guidance and education to City employees and stakeholders.
Reviews proposed technologies, including cloud and Artificial Intelligence solutions, to ensure appropriate cybersecurity controls, privacy safeguards, and risk mitigation measures are incorporated.
Conducts cybersecurity risk assessments of systems, applications, cloud services, and third-party vendors, and leads the City's vendor cybersecurity risk management program.
Coordinates vulnerability management activities, including risk prioritization, remediation tracking, and exception management.
Documents security concerns and communicates significant cybersecurity risks and incidents to appropriate leadership in a timely manner.
Assists in the testing, selection, placement, implementation, documentation, operation, and maintenance of various information security technologies.
Maintains logs and writes reports regarding information security activities.
Plans, coordinates, manages, or performs internal and external security assessments, audits, and evidence-gathering exercises.
Provides technical guidance, mentorship, and cybersecurity subject matter expertise to less experienced Security team members and serves as an escalation point for complex security issues.
Leads cybersecurity incident response activities, coordinates remediation efforts, and provides post-incident recommendations to reduce organizational risk.
Keeps apprised of latest developments and updates in information security technology.
Performs related work as required.