What are the responsibilities and job description for the IT Network Security Officer - OPD position at City of Ocala?
JOB
The Network Security Officer will be responsible for maintaining and documenting the security profile of the Ocala Police Department. The security officer will work closely with all aspects of Ocala Police Department sections to ensure tight collaboration and integration of security solutions. The security officer must possess the ability to perform security requirements elicitation, analysis, and specification with a working ability to identify architecturally significant requirements and their ramifications. Develop attack and defense methodologies for high risk computer networks. This position will be responsible for business continuity and continuing operations during a disaster.
EXAMPLE OF DUTIES
1. Research new and emerging security attacks and develop techniques and research solutions to control risks.2. Evaluate the effectiveness of existing security measures, such as firewalls, password policies and intrusion-detection systems.3. Make recommendations to improve security based on their assessments and knowledge of current and emerging threats.4. Monitor system access to ensure compliance with standards and policies.5. Promote appropriate security best practices and fundamentals in architectural design and implementation.6. Perform security auditing, assessments, and evaluation vulnerability testing tools and procedures.7. Develop policies that give managers and employees varying levels of access to applications, systems, and data.8. Provides service consultation and support towards department related projects and or solutions.9. Perform enterprise security architecture requirements analysis and design, support/lead engineering and deployment activities.10. Provide ongoing engineering support for deployed security technologies, support security design reviews for all application and technology rollouts.11. Review proposed changes in the technology environment for security implications.12. Evaluate and implement new technology for relevancy to the department's overall security strategy and in support of new business requirements/initiatives.13. Evaluate each control, technology, and gap for potential improvement and refinement.14. Coordinate with various project teams to communicate the necessity of security requirements and design constraints as part of SDLC.15. Produce, review, and update designs for security vulnerabilities & gaps.16. Responsible for maintaining departmental data security using NTFS and Share permissions following Microsoft-recommended best practices to maintain the highest degree of data integrity.17. Installs server and client virus protection software and ensure updates are applied on a timely basis.18. Responsible for managing the programming, administration, and support activities for the department's server and client systems, including configuration, performance management, backup and recovery.19. Leads or commissions suitable information security awareness, training, and educational activities.20. Responsible for working with the network engineer on firmware updates, patches to all operating systems across all systems.21. Responsible for developing response plans, continuity of operations plans, and preventative plans for training.22. Must be able to backfill work tickets for the helpdesk as business needs require.23. Will work as the local agency security officer for FDLE requirements.24. Must have experience across VMware, Azure, O365, Windows Operating Systems.25. Position will require scheduled on call rotations and must be available to work nights, weekends, holidays as needed.Perform any other related duties as required or assigned.
SUPPLEMENTAL INFORMATION
QUALIFICATIONS To perform this job successfully, an individual must be able to perform each essential duty mentioned satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. RESPONSIBILITY FOR FUNDS, PROPERTY and EQUIPMENT None. SUPERVISORY RESPONSIBILITIES Directly supervises 0 subordinate supervisor(s) who supervise(s) a total of 0 employee(s). Supervises 0 non-supervisory employee(s). Carries out supervisory responsibilities in accordance with the organizations policies and applicable laws. Responsibilities include interviewing, hiring and training employees; planning, assigning and directing work; appraising performance, rewarding and disciplining employees; addressing complaints and resolving problems. COMMUNICATION SKILLS Ability to read and understand simple instructions, short correspondence, notes, letters and memos; Ability to write simple correspondence. Ability to read and understand documents such as policy manuals, safety rules, operating and maintenance instructions, and procedure manuals; Ability to write routine reports and correspondence. Ability to effectively communicate information and respond to questions in person-to-person and small group situations with customers, clients, general public and other employees of the organization. Ability to read, analyze, and understand general business/company related articles and professional journals; Ability to speak effectively before groups of customers or employees. MATHEMATICAL SKILLS Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to prepare and interpret bar graphs. CRITICAL THINKING SKILLS Ability to solve practical problems and deal with a variety of known variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, or diagram formats. SUPERVISION RECEIVED Under direction where a definite objective is set up and the employee plans and arranges own work, referring only unusual cases to supervisor. PLANNING Considerable responsibility with regard to general assignments in planning time, method, manner, and/or sequence of performance of own work, in addition, the work operations of a group of employees, all performing basically the same type of work. DECISION MAKING Performs work operations which permit frequent opportunity for decision-making of minor importance and also frequent opportunity for decision-making of major importance, either of which would affect the work operations of medium organizational component and the organization's clientele. MENTAL DEMAND Close mental demand. Operations requiring close and continuous attention for control of operations. Operations requiring intermittent direct thinking to determine or select the most applicable way of handling situations regarding the organization's administration and operations; also to determine or select material and equipment where highly variable sequences are involved. ANALYTICAL ABILITY / PROBLEM SOLVING Moderately directed. Activities covered by wide-ranging policies and courses of action, and generally directed as to execution and review. High order of analytical, interpretative, and/or constructive thinking in varied situations. USE OF MACHINES, EQUIPMENT AND/OR COMPUTERS Regular use of highly complex machines and equipment; specialized or advanced software programs. ACCURACY Probable errors of internal and external scope would have a moderate effect on the operational efficiency of the organizational component concerned. Errors might possibly go undetected for a considerable period of time, thereby creating an inaccurate picture of an existing situation. Could cause further errors, losses, or embarrassment to the organization. The possibility for error is always present due to requirements of the job. PUBLIC CONTACT Extensive contacts with various diversified sectors of the public environment; wherein, the contacts are of extreme importance and failure to exercise proper judgment can lead to substantial losses to the organization. EMPLOYEE CONTACT Contacts with other departments or offices and also frequently with individuals in middle level positions; consulting on problems which necessitate judgment and tact in presentation to obtain cooperation or approval of action to be taken. Also, important contacts with associates as required in advanced supervisory jobs. PREFERRED CERTIFICATES, LICENSES, REGISTRATIONS SOFTWARE SKILLS REQUIRED Advanced: 10-Key, Alphanumeric Data Entry, Spreadsheet Intermediate: Word Processing/Typing ADDITIONAL SOFTWARE SKILLS Not indicated. OTHER SKILLS Excellent customer service and verbal communication skills Excellent written communications and problem-solving skills Excellent organizational skills with ability to team with others to develop and implement complex projects Ability to work a variety of projects with limited supervision Solid analytical skills to troubleshoot high-level, complex and technical problems Knowledge of industry security standards such as ISO27001/ISO27002, NIST, etc. Knowledge of common IT architectures, cryptography, encryption, ciphers, certificate and key based technologies, TCP/IP protocol suite Knowledge of operating system design and principles Knowledge in Microsoft Excel, PowerPoint, Visio and Word Knowledge of continuity of operations plans PHYSICAL ACTIVITIES The following physical activities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions and expectations. While performing the functions of this job, the employee is continuously required to sit, use hands to finger, handle, or feel, talk or hear; regularly required to reach with hands and arms; occasionally required to stand, walk, stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 10 pounds, occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision. ENVIRONMENTAL CONDITIONS There are no harmful environmental conditions that are present for this position. The noise level in the work environment is usually moderate. ADDITIONAL INFORMATION Residency Requirement Resident of Marion County or exemption via the Chief of Police. More ADDITIONAL INFORMATION Not indicated.This is not necessarily an exhaustive list of all responsibilities, skills, duties, requirements, efforts, or working conditions associated with the job. While this is intended to be an accurate reflection of the current job, management reserves the right to revise the job or to require that other or different tasks be performed when circumstances change (e.g., emergencies, changes in personnel, workload, rush jobs, or technological developments).
The Network Security Officer will be responsible for maintaining and documenting the security profile of the Ocala Police Department. The security officer will work closely with all aspects of Ocala Police Department sections to ensure tight collaboration and integration of security solutions. The security officer must possess the ability to perform security requirements elicitation, analysis, and specification with a working ability to identify architecturally significant requirements and their ramifications. Develop attack and defense methodologies for high risk computer networks. This position will be responsible for business continuity and continuing operations during a disaster.
EXAMPLE OF DUTIES
1. Research new and emerging security attacks and develop techniques and research solutions to control risks.2. Evaluate the effectiveness of existing security measures, such as firewalls, password policies and intrusion-detection systems.3. Make recommendations to improve security based on their assessments and knowledge of current and emerging threats.4. Monitor system access to ensure compliance with standards and policies.5. Promote appropriate security best practices and fundamentals in architectural design and implementation.6. Perform security auditing, assessments, and evaluation vulnerability testing tools and procedures.7. Develop policies that give managers and employees varying levels of access to applications, systems, and data.8. Provides service consultation and support towards department related projects and or solutions.9. Perform enterprise security architecture requirements analysis and design, support/lead engineering and deployment activities.10. Provide ongoing engineering support for deployed security technologies, support security design reviews for all application and technology rollouts.11. Review proposed changes in the technology environment for security implications.12. Evaluate and implement new technology for relevancy to the department's overall security strategy and in support of new business requirements/initiatives.13. Evaluate each control, technology, and gap for potential improvement and refinement.14. Coordinate with various project teams to communicate the necessity of security requirements and design constraints as part of SDLC.15. Produce, review, and update designs for security vulnerabilities & gaps.16. Responsible for maintaining departmental data security using NTFS and Share permissions following Microsoft-recommended best practices to maintain the highest degree of data integrity.17. Installs server and client virus protection software and ensure updates are applied on a timely basis.18. Responsible for managing the programming, administration, and support activities for the department's server and client systems, including configuration, performance management, backup and recovery.19. Leads or commissions suitable information security awareness, training, and educational activities.20. Responsible for working with the network engineer on firmware updates, patches to all operating systems across all systems.21. Responsible for developing response plans, continuity of operations plans, and preventative plans for training.22. Must be able to backfill work tickets for the helpdesk as business needs require.23. Will work as the local agency security officer for FDLE requirements.24. Must have experience across VMware, Azure, O365, Windows Operating Systems.25. Position will require scheduled on call rotations and must be available to work nights, weekends, holidays as needed.Perform any other related duties as required or assigned.
SUPPLEMENTAL INFORMATION
QUALIFICATIONS To perform this job successfully, an individual must be able to perform each essential duty mentioned satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. RESPONSIBILITY FOR FUNDS, PROPERTY and EQUIPMENT None. SUPERVISORY RESPONSIBILITIES Directly supervises 0 subordinate supervisor(s) who supervise(s) a total of 0 employee(s). Supervises 0 non-supervisory employee(s). Carries out supervisory responsibilities in accordance with the organizations policies and applicable laws. Responsibilities include interviewing, hiring and training employees; planning, assigning and directing work; appraising performance, rewarding and disciplining employees; addressing complaints and resolving problems. COMMUNICATION SKILLS Ability to read and understand simple instructions, short correspondence, notes, letters and memos; Ability to write simple correspondence. Ability to read and understand documents such as policy manuals, safety rules, operating and maintenance instructions, and procedure manuals; Ability to write routine reports and correspondence. Ability to effectively communicate information and respond to questions in person-to-person and small group situations with customers, clients, general public and other employees of the organization. Ability to read, analyze, and understand general business/company related articles and professional journals; Ability to speak effectively before groups of customers or employees. MATHEMATICAL SKILLS Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to prepare and interpret bar graphs. CRITICAL THINKING SKILLS Ability to solve practical problems and deal with a variety of known variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, or diagram formats. SUPERVISION RECEIVED Under direction where a definite objective is set up and the employee plans and arranges own work, referring only unusual cases to supervisor. PLANNING Considerable responsibility with regard to general assignments in planning time, method, manner, and/or sequence of performance of own work, in addition, the work operations of a group of employees, all performing basically the same type of work. DECISION MAKING Performs work operations which permit frequent opportunity for decision-making of minor importance and also frequent opportunity for decision-making of major importance, either of which would affect the work operations of medium organizational component and the organization's clientele. MENTAL DEMAND Close mental demand. Operations requiring close and continuous attention for control of operations. Operations requiring intermittent direct thinking to determine or select the most applicable way of handling situations regarding the organization's administration and operations; also to determine or select material and equipment where highly variable sequences are involved. ANALYTICAL ABILITY / PROBLEM SOLVING Moderately directed. Activities covered by wide-ranging policies and courses of action, and generally directed as to execution and review. High order of analytical, interpretative, and/or constructive thinking in varied situations. USE OF MACHINES, EQUIPMENT AND/OR COMPUTERS Regular use of highly complex machines and equipment; specialized or advanced software programs. ACCURACY Probable errors of internal and external scope would have a moderate effect on the operational efficiency of the organizational component concerned. Errors might possibly go undetected for a considerable period of time, thereby creating an inaccurate picture of an existing situation. Could cause further errors, losses, or embarrassment to the organization. The possibility for error is always present due to requirements of the job. PUBLIC CONTACT Extensive contacts with various diversified sectors of the public environment; wherein, the contacts are of extreme importance and failure to exercise proper judgment can lead to substantial losses to the organization. EMPLOYEE CONTACT Contacts with other departments or offices and also frequently with individuals in middle level positions; consulting on problems which necessitate judgment and tact in presentation to obtain cooperation or approval of action to be taken. Also, important contacts with associates as required in advanced supervisory jobs. PREFERRED CERTIFICATES, LICENSES, REGISTRATIONS SOFTWARE SKILLS REQUIRED Advanced: 10-Key, Alphanumeric Data Entry, Spreadsheet Intermediate: Word Processing/Typing ADDITIONAL SOFTWARE SKILLS Not indicated. OTHER SKILLS Excellent customer service and verbal communication skills Excellent written communications and problem-solving skills Excellent organizational skills with ability to team with others to develop and implement complex projects Ability to work a variety of projects with limited supervision Solid analytical skills to troubleshoot high-level, complex and technical problems Knowledge of industry security standards such as ISO27001/ISO27002, NIST, etc. Knowledge of common IT architectures, cryptography, encryption, ciphers, certificate and key based technologies, TCP/IP protocol suite Knowledge of operating system design and principles Knowledge in Microsoft Excel, PowerPoint, Visio and Word Knowledge of continuity of operations plans PHYSICAL ACTIVITIES The following physical activities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions and expectations. While performing the functions of this job, the employee is continuously required to sit, use hands to finger, handle, or feel, talk or hear; regularly required to reach with hands and arms; occasionally required to stand, walk, stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 10 pounds, occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision. ENVIRONMENTAL CONDITIONS There are no harmful environmental conditions that are present for this position. The noise level in the work environment is usually moderate. ADDITIONAL INFORMATION Residency Requirement Resident of Marion County or exemption via the Chief of Police. More ADDITIONAL INFORMATION Not indicated.This is not necessarily an exhaustive list of all responsibilities, skills, duties, requirements, efforts, or working conditions associated with the job. While this is intended to be an accurate reflection of the current job, management reserves the right to revise the job or to require that other or different tasks be performed when circumstances change (e.g., emergencies, changes in personnel, workload, rush jobs, or technological developments).
