Senior Information Technology Security Analyst

Posting number: FP036-02

Department: Information Technology Services

Job classification: SENIOR INFORMATION TECHNOLOGY SECURITY ANALYST

Posting type: Open

Categories: IT and Computers

Summary

The person in this role designs, implements, and supports a complete Information Security program, consisting of hardware, software, policies and procedures, which ensures the confidentiality, integrity and availability of all information systems in the City of Fort Lauderdale network. This program encompasses many departments such as, Police, Fire, and SCADA networks. Supervises support staff and evaluates operating policies and procedures and makes recommendations to improve security and operating efficiency and productivity.

This job classification is included within the bargaining unit represented by Federation of Public Employees and therefore is subject to the terms and conditions of the Collective Bargaining Agreement between the City of Fort Lauderdale and Federation of Public Employees.

This is a Management Category II position which includes eight(8) additional Management Vacation Days and a Vehicle Allowance of $340/month.

Examples of duties

Essential functions are the basic job duties that an employee must be able to perform, with or without reasonable accommodation. The list of essential functions, as outlined herein, is intended to be representative of the tasks performed within this classification.   The omission of a function does not preclude management from assigning essential duties not listed herein if such duties relate to the position.

• Designs, implements and supports secure information security architecture for the City of Fort Lauderdale.
• Provides cybersecurity governance, risk, compliance, and audit assessments in support of CJIS, PCI-DSS, HIPAA, NIST, and other applicable requirements.
• Develops, reviews, and maintains cybersecurity policies, procedures, and standards to meet regulatory requirements and improve security and operational effectiveness.
• Serves as a technical lead for cybersecurity initiatives by coordinating project activities and providing cybersecurity subject matter expertise.
• Leads project implementation with large groups of people from varying departments.
• Evaluates the cybersecurity impact of proposed projects and initiatives on the City's technology environment.
• Researches emerging threats, vulnerabilities, and attack techniques and evaluates their potential impact on the City's technology environment.
• Supports cybersecurity awareness initiatives and provides security guidance and education to City employees and stakeholders.
• Reviews proposed technologies, including cloud and Artificial Intelligence solutions, to ensure appropriate cybersecurity controls, privacy safeguards, and risk mitigation measures are incorporated.
• Conducts cybersecurity risk assessments of systems, applications, cloud services, and third-party vendors, and leads the City's vendor cybersecurity risk management program.
• Coordinates vulnerability management activities, including risk prioritization, remediation tracking, and exception management.
• Documents security concerns and communicates significant cybersecurity risks and incidents to appropriate leadership in a timely manner.
• Assists in the testing, selection, placement, implementation, documentation, operation, and maintenance of various information security technologies.
• Maintains logs and writes reports regarding information security activities.
• Plans, coordinates, manages, or performs internal and external security assessments, audits, and evidence-gathering exercises.
• Provides technical guidance, mentorship, and cybersecurity subject matter expertise to less experienced Security team members and serves as an escalation point for complex security issues.
• Leads cybersecurity incident response activities, coordinates remediation efforts, and provides post-incident recommendations to reduce organizational risk.
• Keeps apprised of latest developments and updates in information security technology.
• Performs related work as required.

Qualifications

MINIMUM JOB REQUIREMENTS:

1. Bachelor's Degree in Information Technology, Computer Science, Management Information Systems or a related field.
2. Five (5) to Seven (7) years of experience in the design, implementation, and support of enterprise-wide IT security programs (hardware, software, policies and procedures) including writing and auditing of policy, procedures and st