INFORMATION SECURITY MANAGER - 65000552

Requisition No: 875505 

Agency: Elder Affairs

Working Title: INFORMATION SECURITY MANAGER - 65000552

 Pay Plan: SES

Position Number: 65000552 

Salary:  $5,126.32-$6,916.67 

Posting Closing Date: 05/11/2026 

Total Compensation Estimator Tool

DEPARTMENT OF ELDER AFFAIRS

BUREAU OF INFORMATION TECHNOLOGY

 

 

 

POSITION OVERVIEW AND RESPONSIBILITIES:

This position will administer the Florida Department of Elder Affairs’ cybersecurity program, to support complex areas of data security, threat and vulnerability management, security auditing, analysis, and security awareness.  This position will proactively work with business units and partners to implement practices that meet policies and standards for information security.  The ISM should understand and articulate the impact of cybersecurity on (digital) business and be able to communicate this to stakeholders.  This individual will assist with the development and implementation of information technology policies, procedures, and best practices.

 

PAY:

Salary will be commensurate with experience and qualifications, ranging from $61,515.84 to $83,000.04, annually.

DUTIES AND RESPONSIBILITIES:

The following duties and responsibilities include, but are not limited to:

• Development of the strategic and operational cybersecurity plans.
• Conduct and/or coordinate a comprehensive risk assessment.
• Develop, update, and implement cybersecurity strategies, policies, procedures, standards, and guidelines.
• Direction and management of the cybersecurity awareness program and periodic campaigns.
• Coordination of the agency information security risk management process.
• Establish and coordinate the agency Cybersecurity Response Team (CRT) to respond to a cybersecurity incident.
• Coordination of Information Technology Disaster Recovery planning in support of the agency Continuity of Operations Plan.
• Serving as the agency’s internal and external point of contact for all information security matters.
• Establish and provide reports directly to the agency head on matters associated with cybersecurity, audits, compliance, and other-directed matters.
• Direct compliance with applicable law for cybersecurity as well as the rules, policies, procedures, and best practices promulgated by the Florida Digital Services, under the Department of Management Services. 
• Interpret security policies, regulations, standards, and other mandates into security control requirements and assess environments against those requirements.
• Facilitate/participate in computer security incident response activities, including incident identification and investigation, containment and remediation, reporting, and post-incident analysis.
• Advise and assist with the design and implementation of countermeasures or mitigating controls.
• Ensure that solicitations, contracts, and service-level agreements contain necessary cybersecurity requirements.
• Evaluate and recommend information security technologies and practices
• Provide periodic internal audits and evaluations of the cybersecurity program.
• Serve as a liaise and the primary point of contact for external information technology audits and assessments.
• Direct, coordinate, produce, and report all necessary requested elements and artifacts to official audit and assessment inquiries.
• Plan, organize, control, and evaluate all applications and services to reduce risk associated with vulnerabilities.
• Communicate with management regarding information security issues and risks, providing recommended action.
• Actively monitor and be aware of current information security trends, information, and news. 
• Participates in the change management process.
• Write, prepare and/or review system, application, and user documentation.
• Assist teams as needed on endpoint security toolset and ensure appropriate alerting.
• Assist teams as needed on Security Information and Event Management (SIEM) tools and ensur