If you are an Internal City Employee, Retiree or Dependent/Survivor of a City Employee please apply internally via Career Icon in your Workday account.

Make a difference in the community you live in! As a Community Builder—an employee with the City of Gainesville— you will have a direct hand in building and improving your community and making a visible impact on the lives of your neighbors. Working for local government is more than a job, it’s a chance to contribute to community success and to help enhance the Gainesville way of life.

Department:

GG_Technology: Technology Administration

Salary Range Minimum:

$119,725.49

Salary Range Maximum:

$190,213.87

Closing Date:

07/25/2025

Job Details:

Job Description:

The Information Security Officer (ISO) is responsible for building a Cyber Security Program to ensure the protection and resilience of the technology systems and information assets that the City of Gainesville employees need to enable the delivery of “Best in Class” Neighbor Services for our community. The ISO is responsible for the citywide cybersecurity strategy, risk management, compliance initiatives, and incident response leadership. This position ensures the confidentiality, integrity, and availability of City information systems and supports the City’s strategic goals by aligning cybersecurity with organizational priorities.

The ISO reports to the Technology Director and leads cyber security analysts in addition to cross-functional Incident Response Team (IRT) members and is the primary liaison with external response partners and service providers.

SUMMARY

The Information Security Officer (ISO) is responsible for building a Cyber Security Program to ensure the protection and resilience of the technology systems and information assets that the City of Gainesville employees need to enable the delivery of “Best in Class” Neighbor Services for our community. The ISO is responsible for the citywide cybersecurity strategy, risk management, compliance initiatives, and incident response leadership. This position ensures the confidentiality, integrity, and availability of City information systems and supports the City’s strategic goals by aligning cybersecurity with organizational priorities.

The ISO reports to the Technology Director and leads cyber security analysts in addition to cross-functional Incident Response Team (IRT) members and is the primary liaison with external response partners and service providers.

EXAMPLES OF WORK*

*This section of the job description is not intended to be a comprehensive list of duties and responsibilities of the position.  The omission of a specific job function does not absolve an employee from being required to perform additional tasks incidental to or inherent in the job.  Performance of lower-level duties may be required.

ESSENTIAL JOB FUNCTIONS

Develops and maintains a comprehensive citywide cyber security program aligned with industry standards and regulatory requirements.

Supports the planning and execution of efforts to insource technology infrastructure, cybersecurity, applications, and IT service delivery.

Leads risk assessment activities and implements controls to mitigate cybersecurity threats.

Assess, implement, operate and maintain cyber security systems e.g. firewalls, web and email scanners, vulnerability scanners, endpoint protection etc.

Establishes and enforces cyber security policies, standards, and procedures.

Oversees incident response planning and execution, including investigations and coordination with law enforcement when necessary.

Ensures compliance with applicable laws, regulations, and frameworks such as NIST, ISO, CIS, FIPA, HIPAA, and PCI-DSS.

Coordinates security awareness and training programs to promote a culture of cybersecurity across the organization.

Provides guidance on secure system design and development throughout the technology lifecycle.

Conducts audits and assessments of internal systems and third-party vendors to evaluate security posture.

Advises senior leadership on current cyber risks, threats, and strategies for mitigation.

NON-ESSENTIAL JOB FUNCTIONS

Attends work on a continuous and regular basis.

Performs related duties as required or assigned by the Director of Technology.

QUALIFICATIONS

To perform this job successfully, an individual must be able to perform each essential job function satisfactorily. Below are the required education, experience, knowledge, skills and abilities to perform the essential functions.

EDUCATION AND EXPERIENCE

Bachelor’s degree from an accred