DEPARTMENT OF ECONOMIC SECURITY

Your Partner For A Stronger Arizona.

DES works with families, community organizations, advocates and state and federal partners to realize our collective vision: A thriving Arizona.

DES serves more than 3 million Arizonans. Our Mission is to strengthen individuals, families, and communities for a better quality of life.

CYBER SECURITY MANAGER/ISO

Job Location:

Division of Technology Services (DTS)
1400 West Washington Street, Phoenix, Arizona 85007
www.azdes.gov

Posting Details:

Salary: $99,706 - $109,706 

Grade: 28

Closing Date: February 3, 2025

Job Summary:

Would you like to be part of an amazing team that helps Arizonans thrive? At the Department of Economic Security (DES) we strengthen individuals, families, and communities for a better quality of life. DES is looking for individuals who are committed to service, community, and teamwork. To learn more about DES please visit des.az.gov; or click on the link here to view ‘Our DES’ video. Come Join the DES Team!

The Department of Economic Security, Division of Technology Services is seeking an experienced and highly motivated individual to join our team as an - Information Security Manager (Cyber Security Manager/ISO). The Information Security Manager (Cyber Security Manager/ISO) is a tactical and operational management position within the Division of Technology (DTS) Security organization. The Cyber Security Deputy Manager is directly responsible for all DTS deployed agency IT security systems, data protection controls, and associated security services. They directly manage the Security team that oversees the proper deployment, configuration, and functioning of these systems.

This position may offer the ability to work remotely within Arizona based upon the department's needs and continual meeting of expected performance measures.

The state of Arizona strives for a work culture that affords employees flexibility, autonomy, and trust. Across our many agencies, boards, commissions, many State employees participate in the State's Remote Work Program and are able to work remotely in their homes, in offices, and in hoteling spaces. All work, including remote work, should be performed within Arizona unless an exception is properly authorized in advance.

Job Duties:

Essential Responsibilities include but are not limited to:

• Manage and oversee DTS Security Analysts and the agency Security Operations Center.
• Coordinate with DTS Security Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, antivirus, and content blacklists) for specialized cyber defense applications. Provide guidance and leadership during a Cyber Incident Response activity.
• Develop and implement security systems and solutions to meet policy requirements. Mitigate security problems, including the management of threat or target analysis of cyber defense information and production of threat information within the enterprise.
• Oversee and ensure that security solutions and security service delivery is evaluated, validated, and implemented as required. Oversee cybersecurity inspections, tests, and reviews are coordinated for the network environment. Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s).
• Prepare, distribute, and maintain plans, instructions, guidance, standard operating procedures, reporting and metrics concerning the security of network system(s) operations. Periodically review DES IT Policy for completeness and currency and provide recommendations as appropriate.
• Work with Senior Cyber Security Manager and Security Architects to assist with assessment of new services and software prior to their integration into the environment including the review of long and short for System Security Plans (SSPs).

Knowledge, Skills & Abilities (KSAs):

Knowledge of:
• Broad and generally deep understanding of all facets of management and leadership, as well enterprise information technology (IT) goals and objectives.
• Organization's risk tolerance and/or risk assessment and management approach.
• Thorough working knowledge of most infrastructure technologies and in-house developed applications utilized in the enterprise.
• Thorough working knowledge of the organization’s methodologies and tools.
• Thorough working knowledge of inter