IT Security Manager (NMDOT/GO/BUS #18630)

The IT Division at NMDOT provides critical technology support services to customers in support of the agency’s mission, including data center and networking services, desktop support, application development services, project management and audio/visual conference support.

As a valued new employee to NMDOT, you may be eligible to received three (3) days of administrative leave upon your start date. This is applicable to external hires not within the State of New Mexico Government. Why does the job exist?

This position manages the Cybersecurity Program for the New Mexico Department of Transportation, reporting directly to the Chief Information Officer, and works with staff agency-wide to provide information security and assurance to the operation. How does it get done?

The primary responsibilities of this position will include:

• Direct the organization’s cybersecurity program by guiding IT cybersecurity strategy, managing risks to the organization, and aligning security operations with agency needs.
• Provide advisory services and recommendations to reduce risk and improve the agency’s security posture.
• Manage responses to cybersecurity events and incidents to ensure timely communication, triage, investigation, containment, and recovery occur according to the agency’s Incident Response Plan (IRP), and continually improve the IRP.
• Ensure performance of regular security scans against agency information systems.
• Collaborate with cross-unit staff to assign vulnerability remediation tasks to responsible technicians.
• Ensure IT and IT Security policies are reviewed annually and updated to keep pace with emerging cybersecurity threats, regulatory requirements, and cybersecurity best practices.
• Maintain a strong cybersecurity training program for agency staff to improve cybersecurity awareness and improve security of the agency’s systems.
• Supervisory duties, including managing performance, performing regular employee evaluations, managing staff schedules, mentoring and training junior staff, and recruiting staff.
• Coordinate with IT Project Managers to envision, charter, and execute projects in a structured fashion to improve the security posture of the agency.

Who are the customers?

This job supports agency-wide customers directly and indirectly.

Bachelor’s degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and four (4) years of experience in IT security or compliance validation (e.g. HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling eight (8) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g. CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g., PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience. Employment Requirements

Must possess and maintain a valid New Mexico Driver’s License. Must possess and maintain a current Defensive Driving Course certificate from the State of New Mexico or must pass and receive a Defensive Driving Course certificate as a condition of continued employment. Working Conditions

Work is performed in an office setting with exposure to Visual/Video Display Terminal (VDT) and extensive personal computer and phone usage. Supplemental Information

3.53.5 out of 5 stars 715 Alta Vista St, Santa Fe, NM 87505 $46.33 - $74.12 an hour - Full-time