What are the responsibilities and job description for the Information Systems Security Specialist position at City of Las Cruces?
Monitors and maintains information security and privacy policies and programs to provide protection and confidentiality of City information systems and data generated, stored, and transmitted electronically.
Environmental Factors:
Work is performed in a standard office environment, and at various locations throughout the City with exposure to all types of weather and traffic conditions. Occasional exposure to heat, dust, construction environments, and electrical equipment.
Physical Factors:
Moderate physical demands; mostly desk work requiring the ability to lift and carry personal computer equipment.
Work Situation Factors:
Position involves competing demands, performing multiple tasks, working to deadlines, occasional work beyond normal business hours, and responding to customer issues. Regular attendance is an essential function of this job to ensure continuity of services. Position is subject to drug testing in accordance with applicable State and Federal regulations and City of Las Cruces policies.
Meeting or exceeding the minimum requirements does not guarantee an invitation to participate in the process.
FIRST CONSIDERATION MAY BE GIVEN TO CURRENT CITY OF LAS CRUCES EMPLOYEES WHO MEET THE MINIMUM REQUIREMENTS.
Full-time, regular, exempt position.
This position is graded RX22.
- Identifies, investigates, and documents specific security issues and violations; conducts and performs assessments and audits of information technology systems and processes.
- Prepares and presents various special and recurring reports; performs various evaluations and analysis on Information systems to identify security risks and report on recommendations and solutions.
- Identifies, documents, tracks, and evaluates vulnerabilities and risks; determines tasks necessary to remediate issues identified; provides notification to management of security breaches or potential issues and recommends solutions in efforts to protect integrity of information and system security.
- Reviews and evaluates placement and role of servers, network devices, and infrastructure; evaluates City needs and implements options for information systems; collaborates with various other departments to ensure that all information systems, servers, networks, and infrastructure are operational and effective.
- Assesses configuration of systems and network devices and adherences to standards for controls; evaluates OS patch levels, system logging and monitoring controls, security of system configuration against defined security standards, account policies, user rights, file system and registry security, local and group security policies, network services configurations, IP addressing and routing, access control lists, traffic filtering rules, logging configurations, IPSEC, SSH, tunneling protocols, and VPNs.
- Manages, configures, deploys, and maintains standard security systems, servers, and applications as directed and required to successfully collect and analyze network information services.
- Participates, engages, and provides feedback and recommendations in various meetings; understands security needs to identify and communicate them effectively.
A sufficient combination of relevant education and job-related experience that has reasonably prepared the applicant to successfully perform the duties and responsibilities of the position, such as those listed above. Work experience must include at least one (1) year of cumulative, paid work experience in an information security related role. Applicant must demonstrate familiarity and capability with TCP/IP packet capture, trace, and analysis, and SMTP header analysis.
PREFERRED QUALIFICATIONS:
Equivalent to an associate's degree in Computer Science, information systems management or related field AND one (1) year enterprise-level MS Windows systems administration experience in a multi-server, networked environment using MS exchange; one (1) year of which must be documented full-time experience in deployment and management of IT security technologies in an enterprise environment. A combination of education, experience, and training may be applied in accordance with City of Las Cruces policy.
Licenses/Certification(s)
Valid driver's license is required. Position requires an acceptable driving record in accordance with City of Las Cruces policy. CompTIA Security Certification, SANS GIAC (Global Information Assurance Certification), Microsoft Windows Security for workstations and servers, MCSA (Microsoft Certified Systems Administrator), Microsoft Windows Systems Hardening, CCNA-Security (Cisco Certified Network Associate Security), or Microsoft Certified System Engineer (MCSE), or other relevant certifications or licenses may be preferred.
Knowledge of: applicable standards, techniques, policies, processes, and procedures related to internal controls, risk assessments, business processes, and internal IT control testing; networking, Microsoft Active Directory, and network design; wireless technologies, intrusion analysis, incident response, and methodology; capabilities of computer software, hardware, and operating systems; security technologies and practices; industry standards and best practices, frameworks, encryption technologies, and firewall administration; Microsoft Windows client malicious software (malware) detection and remediation procedures; multiple operating systems configuration and management including, but not limited to, Microsoft Windows client, Microsoft Windows server, Cisco IOS, and common commercial Linux variants; command line shell scripting and configuration management; job related terminology including technical terms; current principles of record keeping and records management; principles and practices of effective research methods and data analysis, customer service, and problem resolution techniques; occupational and environmental safety and health hazards, and safety practices; safe and effective use and maintenance of related tools, materials, and equipment; current methods and standards for preparing effective business correspondence; correct English usage, grammar, composition, spelling, punctuation and vocabulary; business and personal computers and related software applications; City organization, operations, policies, and procedures to effectively perform the required functions and duties of the position.
Ability to: perform a variety of duties and responsibilities and assess and prioritize multiple tasks, projects, and demands to meet deadlines; ensure appropriate levels of customer service to achieve expectations and meet objectives; read, understand, and assure compliance with a variety of policies, procedures, rules, standards, and regulations governing related activities and functions; collect applicable information and maintain accurate and timely records; maintain confidentiality of information and data; communicate effectively orally and in writing and use interpersonal skills to sufficiently exchange or convey information and receive work direction; prepare and present accurate and reliable information and reports; establish and maintain effective and appropriate working relationships with employees, other agencies, and the public; safely and effectively operate relevant tools, equipment, and motorized vehicles; navigate across even and uneven surfaces; timely and accurately enter data and update records using various mediums and formats; take initiative and exercise sound independent judgment within established procedural guidelines and carry out primary responsibilities in accordance with all governing regulations, statutes, and procedures to ensure achievement of goals and objectives.
Skills in: reading, understanding, and applying relevant rules, ordinances, codes, regulations, policies, and procedures; effectively managing assignments; responding to inquiries timely and within the scope of delegated authority; responding appropriately, maintaining objectivity and freedom from prejudice, and exercising sound judgment and understanding in all interactions; effectively working independently, or as a team member, in various environments with changing priorities; preparing and presenting various reports, documents, forms, and correspondence; researching information, analyzing data, maintaining accurate records, and updating information in various mediums and formats; operating a personal computer with installed generic and specialized software; preparing and presenting information in a clear and concise manner; demonstrating appropriate and effective interpersonal communication and conflict resolution skills; performing highly effective support in assigned areas.
Salary : $66,268 - $95,242
