Information Security Officer UN

The Information Security Officer (ISO) will play an integral role in the development, implementation, compliance and management of information security strategies and efforts across the City of Albuquerque. The ISO will perform complex, high level technical duties for the City’s technological system to mitigate and reduce vulnerabilities and cyber breaches utilizing existing and emerging technology tools and trends. Tasked with managing cyber security strategies, continuity planning and evaluating compliance standards to improve and protect the City’s technological security, efficiency and effectiveness. This is an unclassified at-will position. Job descriptions are intended to present a general list of tasks/duties performed by employees within this job classification. Job Descriptions are not intended to reflect all duties performed within the job.

Essential and Supplemental Functions

ESSENTIAL FUNCTIONS: Essential functions may include but are not limited to the functions listed below. Must be able to perform the essential functions of the job with or without a reasonable accommodation.

• Manage, investigate and address issues surrounding cybersecurity incidents timely and effectively; provide solutions driven responses to mitigate and manage future attacks.
• Evaluate existing security infrastructure and implement industry standard and emerging security tools to monitor and investigate threats, attacks, and trends.
• Lead teams in implementing remediation of detected vulnerabilities to maintain high level security standards.
• Develop and implement actionable solutions to complex technology problems or issues involving the City’s information security.
• Research, develop and incorporate applicable standards, operating procedures, policies, and controls for department and city information security directives.
• Provide the most update to date information pertaining to technology trends and security standards; provide recommendations to management.
• Conduct independent tests/scans to the operating systems, applications, networks, and databases using the appropriate vulnerability/compliance verification tools; continuously monitor and review technical inspections.
• Manage, direct and oversee projects focused on enterprise information security.
• Direct and lead inter-departmental teams in technical services, computer security, enhancing awareness to actively remedy security issues and concerns.
• Conduct IT briefings, participate in inspections and audits; to include recommendations for networks, infrastructure, application security services in compliance with city policies and processes.
• Support efforts for vulnerability/risk assessment analysis and plans, to increase stability and control current IT system and software
• Design, build and deploy vulnerability management frameworks and technologies.
• Develop and manage security awareness training and testing.

SUPPLEMENTAL FUNCTIONS:

• Provide after-hour/off-hour assistance with little notice, to remedy, control, repair vulnerabilities or breaches, or potential issues
• Stay abreast of new and emerging technology trends and security standards; incorporate new developments as appropriate.
• Attend and participate in professional group meetings; stay abreast of new trends and innovations related to assigned area of responsibility
• Perform related duties and responsibilities as required., Office environment; exposure to computer screens and various electronic devices.

Education and experience directly related to the minimum requirements below may be interchangeable on a year for year basis.

Bachelor’s degree from an accredited college or university in computer science, cyber security, or information technology; and

Five (5) years of experience in information technology, information security, or application security engineering;

To include two (2) years in a senior leadership role in information security, and

Must obtain a Certified Information Systems Security Professional (CISSP) or Certified Chief Information Security Officer Certification (CCISO) within one (1) year from date of hire.

ADDITIONAL REQUIREMENTS:

Possession of a valid New Mexico Driver’s License, or the ability to obtain by date of hire.

Possession of a City Operator’s Permit (COP) within 6 months of date of hire.

Pulled from the full job description

• Tuition reimbursement
• Parental leave
• Vision insurance
• Dental insurance
• Life insurance
• Employee assistance program
• Disability insurance