Security Operations Lead, Manager Information Technology Services 2 (Information Security), ref #5779

Description

Duties Description

Under the direction of the senior leadership within the Chief Information Security Office (CISO, the incumbent will lead the Security Operations Section. The Security Operations section is responsible for the oversight and visibility of a variety of operational security tools and functions to help ensure they are providing optimal protections for ITS and its client agencies. The incumbent will provide subject matter expertise across multiple functional areas as well as provide direction and support for activities within their section.

The position requires an incumbent to act with a great deal of independence in alignment with CISO leadership and ITS strategic direction. The position requires technical expertise in a broad range of areas to permit working directly with technical teams throughout ITS. The position requires communicating orally and in writing with various individuals including management, users, vendors, and other IT staff. The incumbent must be able to communicate clearly with subordinate staff regarding work priorities and performance. The incumbent will have to work with various teams and stakeholders to resolve technically complex and politically sensitive issues under pressure.

The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.

Duties Include, But Are Not Limited To

• Provide support and leadership for the Security Operations section and staff.
• Serve as a subject matter expert for a variety of security technology, including but not limited to firewalls, intrusion detection/intrusion prevention systems, endpoint security, web application firewalls, and new emerging technology.
• Develop and maintain visibility into all operational security tools within ITS to allow for oversight and monitoring of their effectiveness.
• Work closely with counterparts within other areas of ITS to help ensure the security components of various systems and tools are configured for optimal protection.
• Participate in the review and evaluation of new security tools for potential use within ITS, make recommendations on how to further increase security posture.
• Supervise staff in the proper performance of their duties. Monitor progress, review major initiatives and projects and take appropriate action as needed.
• Monitor and remain aware of information security industry trends, tools, and techniques.
  
  

Qualifications

Minimum Qualifications

Bachelor’s degree* with at least 15 credit hours in cyber security, information assurance or information technology and five years of information technology experience, including four years of information security or information assurance experience and three years at a supervisory level or one year at a managerial level.

• Bachelor's degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor's degree on a year-for-year basis; an associate's degree requires an additional two years of general information technology experience. Experience solely in information security or information assurance may substitute for the general information technology experience.
  
  

Preferred Qualifications

Certifications in one or more of the following:

• Cyber Defense (e.g., GCIA, GCIH, GCED, GSOM, GSOC, GMON, GCDA)
• Cyber Threat Intelligence (e.g., GCTI, CTIA, CCIP, GOSI)
• Information Security Management (e.g., CISSP, CISM, CCISO)
  
  

3 years’ experience in one or more of the following:

• Leading a team in related work
• Applying and implementing network and/or system security
• Process development and process improvement
• Technical writing
  
  

1 years’ experience in one or more of the following:

• Developing metrics and key performance indicators
• Managing or performing cybersecurity incident response
  
  

Strong understanding of enterprise IT environments, including but not limited to system administration, network architecture, operating systems, endpoint detection and response tools, and network-based security solutions (e.g., IDS/IPS, firewalls).

Strong understanding of the foundations of Information Security, such as the CIA triad, information classification, identity and access management, risk management, vulnerability management, secure architecture and engineering, network security, software development security, etc.

Excellent oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding.

Demonstrated critical thinking, problem solving and analytical skills.

Additional Comments

Background check and fingerprinting are required.

Additional details on work shift will be discussed at time of interview.

• Please note, this position may be filled in either Latham, NYC, or other locations statewide.
  
  

Benefits of Working for NYS

Generous benefits package, worth 65% of salary, including:

• Holiday & Paid Time Off
• Thirteen (13) paid holidays annually
• Up to thirteen (13) days of paid vacation leave annually
• Up to five (5) days of paid personal leave annually
• Up to thirteen (13) days of paid sick leave annually for PEF
• Up to three (3) days of professional leave annually to participate in professional development
  
  

Health Care Benefits

• Eligible employees and dependents can pick from a variety of affordable health insurance programs
• Family dental and vision benefits at no additional cost
  
  

Additional Benefits

• New York State Employees’ Retirement System (ERS) Membership
• NYS Deferred Compensation
• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
• Public Service Loan Forgiveness (PSLF)
• Up to 50% telecommuting
• And many more.