Deputy Chief Information Security Officer

Company Description

A best-in-class city that attracts best-in-class talent, Philadelphia is an incredible place to build a career. From our thriving arts scene and rich history to our culture of passion and grit, there are countless reasons to love living and working here. With a workforce of over 30,000 people, and more than 1,000 different job categories, the City of Philadelphia offers boundless opportunities to make an impact. 
As an employer, the City of Philadelphia values inclusion, integrity, innovation, empowerment, and hard work above all else. We offer a vibrant work environment, comprehensive health care and benefits, and the experience you need to grow and excel. If you’re interested in working with a passionate team of people who care about the future of Philadelphia, start here.
What We Offer:
•    Impact - The work you do here matters to millions. 
•    Growth - Philadelphia is growing, why not grow with it? 
•    Diversity & Inclusion - Find a career in a place where everyone belongs.
•    Benefits - We care about your well-being.
 

The Office of Innovation & Technology (OIT) is the central IT agency for the City of Philadelphia headed by the Chief Information Officer (CIO). OIT oversees all major information and communications technology initiatives for the City of Philadelphia - increasing the effectiveness of the information technology infrastructure, where the services provided are advanced, optimized, and responsive to the needs of the City of Philadelphia’s businesses, residents, and visitors. OIT responsibilities include: identifying the most effective approach for implementing new information technology directions throughout city government; improving the value of the city’s technology assets and the return on the city’s technology investments; ensuring data security continuity; planning for continuing operations in the event of disruption of information technology or communications services; and supporting accountable, efficient and effective government across every city department, board, commission and agency.

Job Description

In support of the CIO, the Chief Information Security Officer (CISO), and the OIT Executive Management Team, the Deputy Chief Information Security Officer (DCISO) brings their experience and passion for the field to join a dynamic Security Team responsible for managing information security risk to systems and data throughout The City of Philadelphia.  This role provides support to the CISO at a strategic level with the development and maintenance of security policies, standards, and procedures.  This role is also critical to shaping the direction of the Information Security Strategy for the City by assisting with the evaluation of emerging trends and best practices in cybersecurity.  The DCISO will analyze technology trends and advancement in areas of IT security and help plan for the long-term direction of the IT organization’s security hardening for City systems. The DCISO shall act on behalf of the CISO as assigned, and, in the absence of the CISO, as the principal security officer advising on IT security-related decisions to inform executive decisions. 

Additionally, the DCISO conducts regular risk assessments and participates in project design reviews with business lines and IT project managers.  This includes a dynamic range of topics including networking, cloud computing technologies, and endpoint technologies.  As such, the DCISO plays a key role in assuring architecture deployments meet security standards.  As part of this role’s day to day responsibilities, the DCISO can be expected to interact with and be a subject matter expert on a range of security domains including Incident Response, SIEM technologies, web and DNS proxies, EDR platforms, privileged access management methodologies, EntraID, and others.  
 

Essential Functions
•    Assists the CISO advising the CIO and executive management team on cybersecurity issues, policies and practices.
•    Evaluate system designs and architectures using a risk-based approach.
•    Perform risk assessments to identify information security risk.
•    Assists the Information Security Group in overseeing a team of security personnel and vendors working together to safeguard the City’s assets, intellectual property, and information systems.
•    Assists the CISO identifying protection goals, objectives, and metrics consistent with the OIT’s strategic plan.
•    Acts as subject matter expert for suite of security tools including EDR, SIEM, vulnerability scanner.
•    Engages with the CISO in directing the development and implementation of security policies, standards, guidelines, and procedures to ensure ongoing maintenance of security.
•    Maintains relationships with other localities, state and federal law enforcement and other related government agencies