Director, IT Security

BRIEF DESCRIPTION OF DUTIES: This position is located in the Office of the Chief Financial Officer (OCFO), Office of the Chief Information Officer (OCIO). The incumbent is responsible for establishing and managing the OCFO’s security strategy and programs to ensure the protection of both physical and informational assets. Duties include, but are not limited to: developing and leading the enterprise-wide security strategy; directing the development, implementation, and enforcement of security policies, standards, and procedures; overseeing cybersecurity operations, including threat detection, incident response, vulnerability management, and data protection; overseeing cloud and vendor-hosted platforms security initiatives; executing disaster recovery and business continuity planning and testing; defining security requirements in contracts; providing strategic guidance on security requirements for new systems;developing and delivering security awareness and training programs; and supervising and mentoring security staff. Performs other related duties as assigned., Integrity is the foundation of a fair and competitive recruitment process. Candidates are expected to complete all application materials, assessments, and interviews without the assistance of artificial intelligence (AI) tools. The use of AI-generated or any unauthorized assistance during any stage of the hiring process is strictly prohibited. Violations of this policy may result in disqualification from consideration for employment. COVID-19 VACCINATION: The Office of the Chief Financial Officer values the safety of our employees, our residents, and our visitors. In support of these values, OCFO employees are strongly encouraged to be immunized against COVID-19. COLLECTIVE BARGAINING UNIT:

Employment with the OCFO is at will. However, the discipline and/or discharge of bargaining unit employees is governed by the collective bargaining agreement.

Eight (8) years of progressive experience managing and directing enterprise information security programs in a government or complex organization; leading, developing, and implementing security policies, standards, and enterprise security strategies; developing and managing cybersecurity programs; overseeing vendor security requirements and contract compliance; and providing technical advisory support for risk management and disaster recovery. Experience must also include leading security awareness or training programs, conducting and overseeing security audits, coordinating with senior leadership and external stakeholders, and at least two (2) years of supervisory experience over technical and managerial staff., Experience that provides the applicant with the particular knowledge, skills, and abilities to perform successfully the duties of the position, and that is typically in or related to the work of the position to be filled. To be creditable, specialized experience must have been equivalent to at least the next lower grade level in the normal line of progression for this position.