Information Security Officer (49429)

Job DetailsJob Location: Rock Hill, SC 29730Position Type: Full-TimeEducation Level: 4 Year DegreeSalary Range: $95,000.00 - $105,000.00 SalaryJob Category: Information Technology ServicesGeneral Description:

The purpose of this job within the organization is to monitor, manage, maintain and be responsible for the City’s entire enterprise cyber security posture.This includes continuous review of all security updates, alerts, logs, system patches, firewalls, edge devices, cloud security controls, system configurations, and any conditions that may impact the confidentiality, integrity, or availability of the City’s systems and data.This role functions as the lead guardian of the City’s cyber defense environment and works in conjunction with the CIO/Director, other ITS managers and Divisions, and key stakeholders to protect the enterprise from cyber-attack, intrusion, disruption, or unauthorized access.This class works independently under limited supervision, reporting major activities through periodic meetings with the CIO/Director and reporting to the appropriate regulatory agencies and other management as necessary. The position supervises at least one direct employee and manages multiple contractors and vendor security teams.

Minimum Education and Experience Requirements:

Requires Bachelor’s degree in Cyber Security, Information Technology, Computer Science, or related field. Requires five or more years of progressively responsible experience in cyber security operations, system administration, network administration, or cloud security administration. Prior supervisory or team lead experience required. An equivalent combination of education, training, and experience will be considered.

Special Certifications and Licenses:

A Valid Driver’s License

Desirable Knowledge, Skills, and Abilities:


Advanced knowledge and understanding of security protocols, architectures, and control points across enterprise systems.
Strong analytic, investigative, and problem-solving skills.
Skilled in communicating technical security findings to diverse audiences in various venues such as presentations, conferences or public forums.
Proficiency in the English Language, both spoken and written; must be able to speak in front of audience of your peers or customers; must be able to do technical documentation in English.
Ability to work independently, collaboratively, and under pressure during security events.
Ability to create reports, documentation, training content, and policies with clarity and precision.
Ability to deal with people beyond giving and receiving instructions. Must be adaptable to performing under stress when confronted with emergency situations or tight deadlines.
Ability to maintain positive customer-focused relationships with co-workers, supervisors, agencies, the general public, and all other internal and external customers.  Personally demonstrates appropriate customer service skills.
Work is performed onsite. The incumbent must be present at work to perform the essential functions of this job.


Essential Job Functions:

Cyber Security Operations & Monitoring:


Continuously monitor and assess the organization’s cyber security posture, including SIEM alerts, endpoint activity, firewall logs, security dashboards, and cloud security notifications.
Review, deploy, guide, implement and validate all security updates, patches, hotfixes, and firmware updates across enterprise systems.
Develop, maintain and enforce security settings, policies, standards, rules, and control points that protect the enterprise from cyber threats.
Investigation, triage and remediate security alerts, indicators of compromise, vulnerabilities, or anomalous behavior across systems and networks.
Will be on-call to address any cyber security threat that rises to the level of high or urgent, or that impacts normal production environments or public safety.
Manage vulnerability assessments or audits and coordinate remediation efforts with system, network, and application teams.
Must be fluent in AI tools and the means to configure, monitor and protect intellectual property, PII and proprietary data. A complete understanding of DLP its setup, configuration and management within a SharePoint or files service environments.
Lead or participate in incident response events, coordinating teams to isolate, contain, remediate, and restore services as needed.
Orchestrates periodic penetration testing or audits to ensure that all policies, conventions, rules or postures are secure and following enterprise conventions and security standards or identify upgrades in posture to keep up with dynamic thread vectors and situations.


 

Systems, Network, and Cloud Administration (Security-Focused):


Utilize system administration, network administration, and cloud administration proficiency to implement, modify, and monitor security configurations.
Periodically audit domain server far