Senior Security Systems Analyst

City of Tampa (FL)•Tampa, FL

47d

About The Position

The Senior Security Systems Analyst plays a crucial role in safeguarding the integrity, confidentiality, and availability of sensitive information within the City of Tampa's digital infrastructure. As a key member of the Technology & Innovation Security Office, the incumbent will be responsible for designing, implementing, and maintaining robust security systems to protect against cyber threats, ensuring compliance with regulatory standards, and responding to security incidents. The Senior Security Systems Analyst will collaborate with various departments to assess security needs, recommend solutions, and contribute to the overall enhancement of the City of Tampa's cybersecurity posture.

Requirements

Extensive knowledge of: cybersecurity principles, practices, and technologies; conducting internal security audits and assessments; conducting comprehensive risk assessments and presenting findings to stakeholders; coordinating with vendors and external partners to implement security solutions; implementing and managing security technologies, including firewalls, antivirus software, intrusion detection systems, and endpoint protection solutions.
Knowledge of: developing, implementing, and enforcing security policies, standards, and procedures; identifying and implementing improvements to enhance the overall security posture of the organization; security frameworks such as NIST, ISO 27001, and CIS Critical Security Controls; leading incident response efforts, including the ability to analyze and contain security incidents effectively.
Ability to: assess and prioritize security risks, understanding their potential impact on the organization; communicate technical details to non-technical stakeholders during incident response efforts; understand regulatory requirements applicable to government entities and the ability to ensure compliance; provide security training and awareness programs for staff; prioritize and manage multiple tasks efficiently, meeting deadlines and delivering high-quality results; troubleshoot and resolve security incidents promptly; pursue relevant certifications and professional development opportunities; staying current with emerging cybersecurity threats, trends, and technologies.
Skills in: critical thinking and a proactive approach to identifying and addressing security vulnerabilities; developing and implementing risk mitigation strategies and controls; conducting thorough security investigations, documenting findings, and recommending corrective actions; managing security projects from inception to completion; strong interpersonal skills for effective collaboration with cross-functional teams and various departments; strong analytical skills to assess complex security issues and provide effective solutions; excellent written and verbal communication skills to articulate complex security concepts to both technical and non-technical audiences.
Bachelor's degree in Information Technology, Computer Science, or a related field.
Proven experience (minimum of 5 years) in a senior-level security role, preferably within a government or public sector environment.
Possession of a valid drivers license may be required.

Nice To Haves

Relevant certifications (e.g., CISSP, CISM, or equivalent) is preferred.

Responsibilities

Develops, implements, and maintains security architectures for critical systems and networks.
Designs and oversees the implementation of security measures to protect digital assets and sensitive information.
Monitors and analyzes security alerts, incidents, and vulnerabilities.
Conducts regular security assessments and penetration tests to identify and address potential weaknesses.
Responds promptly to security incidents and provides detailed post-event analyses.
Contributes to the development and enforcement of security policies, standards, and procedures.
Ensures compliance with relevant regulatory requirements and industry best practices.
Collaborates with other IT staff and departments to integrate security measures into the overall IT architecture.
Provides training and awareness programs to educate staff on security best practices.
Assess and prioritizes security risks, recommending appropriate mitigation strategies.
Conducts regular risk assessments and audits to identify and address potential vulnerabilities.
Leads the response to security incidents, including coordinating with internal and external stakeholders.
Conducts thorough investigations into security breaches, documenting findings and recommending corrective actions.
Evaluates and manages third-party security vendors and tools.
Collaborates with vendors to implement and maintain security solutions.