Associate Director, Cybersecurity

Department: Information Technology

Employment Type: Full Time

Location: Crystal Building 40 W20th St

Reporting To: Jay Haque

Compensation: $165,000 - $172,000 / year

Description

Overview
NYPL Technology provides IT services supporting the Library’s mission. This includes, desktop, networking, systems, business applications, and cybersecurity services. The Cybersecurity team is tasked with maturing NYPL’s overall security posture to ensure PII and critical systems are safeguarded throughout the library. 
The Associate Director, Cybersecurity will partner with the IT Product and Policy lead to continually improve NYPL’s cybersecurity awareness and operational practices across the organization. This includes working collaboratively on writing and implementing policies, routinely reporting on operational tempo, documenting and communicating issues, selecting and administering NYPL’s suite of cybersecurity tools, and spearheading initiatives to implement cybersecurity-aware processes for handling data, payments, and systems across the Library.

We are looking for someone we can count on to:
Own:

• Leadership of NYPL’s cybersecurity team
• Day to day operational leadership of NYPL’s suite of cybersecurity tools
• Technical partner for IT Strategy, Policy, and Insights team
• Relationship management with key business partners and vendors
• Technical architecture of cybersecurity ecosystem
• Development of cybersecurity procedures and practices
• Development of cybersecurity OKRs, PKIs 
• Point of contact for cybersecurity initiatives including audits, maturity assessments, and pentests

Teach:

• Mentor cybersecurity staff
• Help business partners assess cybersecurity risk to make informed decisions
• Partner with IT line managers to mature security posture

Learn:

• Understand Library’s unique place in ensuring security and privacy of the data and systems entrusted to it.
• Advance NYPL’s cybersecurity practice through automation, right-sized operations, and commitment to developing a solid operational tempo.

Improve:

• Monitoring and operation efficiency of the cybersecurity practice.
• Enhance or introduce cybersecurity tools and practices.

Some expectations for this role are that within:
1 month, this person will:

• Be familiar with IT practices and teams, roles & responsibilities.
• Build initial relationships with senior stakeholders across the organization. 
• Assess NYPL’s cybersecurity posture and begin thinking about enhancements. 
• Own project backlog and assess resource allocation
• Prioritize efforts

3 months, this person will:

• Own and understand cybersecurity practices
• Take over Monthly IT Cybersecurity Updates
• Establish routine operations and streamline reporting
• Lead incident response efforts

6 months and beyond, this person will:

• Provide expert level oversight and ownership of NYPL’s cybersecurity practice
• Lead the team to execute key projects and day to day cybersecurity operations 
• Lead roadmap development and budget planning
• Be the primary point of contact for all cybersecurity related projects.

Responsibilities

• Co-lead development on internal practices, processes, and policies to enhance NYPL’s cybersecurity posture. 
• Enhance organizations risks assessment practices, incident response, and operational tempo reporting practices. 
• Evaluate business processes in key areas across the organization and recommend process and policy improvements to safeguard data, assets, and organization from cyber criminals. 
• Negotiate, influence, and build consensus with key partners to implement security-centric processes and practices.
• Publish Information Security reports for an executive audience. 
• Liaise with NYC Cyber Command, NYPL’s Physical Security Team, Law Enforcement, and industry peers re: cybersecurity issues. 
• Continue to enhance the Library’s cybersecurity awareness program.
• Evaluate, select, implement, and administer NYPL’s suite of cybersecurity tools. 
• Work closely with peers in IT, and partners throughout the Library, to identify gaps and implement cost-effective solutions

Required Education, Experience & Skills

Required Education & Certifications

• Bachelor’s degree or combination of education and work experi