Lead Security Administrator

POSITION DUTIES AND QUALIFICATIONS 

SUMMARY OF DUTIES:

The Lead Security Administrator is responsible for the development and delivery of a comprehensive information security and privacy program for the City. The scope of this program is City wide and includes information in electronic, print and other formats. The purposes of this program include: to assure that information created, acquired or maintained by the City and its authorized users, is used in accordance with its intended purpose; to protect City information and its infrastructure from external or internal threats, and to assure that the City complies with statutory and regulatory requirements regarding information access, security and privacy. The Lead Security Administrator develops and administers processes and standards for information security within the City's defense in depth information security architecture. The position validates that security policies are implemented and that monitoring and testing is in place, and maintains awareness of new threats and counter measures. This individual directs the work of staff responsible for computer and IT security inside the organization. The Lead Security Administrator performs the role of Disaster Recovery Manager for incidents that result from unauthorized access.

DUTIES AND RESPONSIBILITIES:*

Position Specific Summary

The Lead Security Administrator position at the City of Tucson’s Information and Technology Department (ITD) supports the strategic development and execution of cybersecurity initiatives, focusing on in-depth technical analysis and leading specific technical projects. The Lead Security Administrator is tasked with implementing and maintaining the city’s security protocols, performing threat analyses, and adopting advanced security technologies.

Work is performed under the supervision of the Cyber Security Manager. This position leads and instructs the daily operational work of Cyber Security personnel.

Duties and Responsibilities

• Leads daily cybersecurity operations, directing junior staff in the management and lifecycle maintenance of security systems under the guidance of the IT Security Manager. Guides and mentor's junior colleagues within the cybersecurity team, leveraging technical expertise to assign tasks, and elevate the cybersecurity team's technical competencies, fostering an environment of continuous learning and development.

• Manages and implements strategic cybersecurity initiatives in alignment with the city's security objectives, ensuring timely and budget-compliant completion. Coordinates cross-functional team collaborations, and technical groups in project delivery, delegating responsibilities to junior staff, and maintaining strategic focus under the IT Security Manager's guidance.

• Utilizes advanced analytical tools such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS)/ Intrusion Protection System (IPS), Threat Intelligence Platforms, and Endpoint Detection and Response (EDR) to actively monitor, detect, and counteract potential cyber threats. Ensures the city's defense mechanisms are both proactive and robust. Stays informed on global cybersecurity trends and threats, translating this knowledge into actionable strategies for the city’s cybersecurity efforts.

• Supports the IT Security Manager by contributing to the strategic development and implementation of cybersecurity measures, ensuring they are in line with the broader technological and security goals of the city. Supports the IT Security Manager in architecting and refining comprehensive cybersecurity frameworks, focusing on robust and scalable solutions to enhance security posture.

• Performs compliance monitoring, documentation maintenance, and additional support tasks as needed to meet the cybersecurity team's objectives and assist the IT Security Manager in decision-making processes. Performs all other duties and tasks as assigned.

Working Conditions:

On-call rotations and perform off-hours work as necessary.

* All duties, responsibilities listed are subject to change.

QUALIFICATIONS:

MINIMUM REQUIRED QUALIFICATIONS:
Education:
Bachelor’s Degree
Work Experience:
Five (5) years of directly related experience
License:
*Any combination of relevant education and experience may be substituted on a year-for-year basis.

ADDITIONAL MINIMUM REQUIRED QUALIFICATIONS:
Education:
Work Experience:
Prior work experience in Computer Systems Analysis, Information Technology, or Computer Network Architecture
License/Certifications: <