Director, Cyber Security Engineering

FIT’s Cyber Security Unit is seeking a Director of Cyber Security Engineering. Reporting to the Chief Information Security Officer (CISO), the selected candidate must have strong organizational and team leadership skills to achieve interdepartmental compliance and to ensure that departmental IT security staff adopt and fully integrate appropriate security and privacy practices and must have extensive technical knowledge in cyber-security and information systems. Detailed knowledge of security and privacy technologies and best practices, as well as, knowledge of appropriate security methods and controls, and IT security privacy legislation and related policy issues are required. The ability to develop and maintain effective working relationships with the Agency’s executive management, IT technical staff, legal staff, third-party vendors, and related industry experts is required. The selected candidate will represent the Agency’s information security interests to State and Federal agencies and regulatory bodies.

Responsibilities will include, but not be limited to the following:

• Manage the Cyber Security Engineering team.
• Develop Cyber Security policies, guidelines, and standards per NIST Cyber Security Framework.
• Provide comprehensive IT security program management under DOF’s CISO’s guidance.
• Perform complex system security design, development, analysis, and testing of all DOF’s internal, hosted facilities and cloud implementation.
• Evaluate network information security and develop appropriate solutions.
• Research new developments in information technology and their relevance to current business needs and security strategies.
• Development of strategies for secure, cloud-based services.
• Project budgeting, quality assessment and control and resource management.
• Implement and advocate for security best practices and security awareness
• Discuss and convey complex information technology security concepts and terminology with both technical and non-technical staff at all levels within and outside the County.

Additional Information: In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

This position may be eligible for remote work up to 2 days per week, pursuant to the Remote Work Pilot Program agreed between the City and the Collective Bargaining Unit representing employees serving in the civil service title.

Do you have experience in Team management?, Do you have a Master’s degree?, 1. A master’s degree in computer science from an accredited college or university and three (3) years of progressively more responsible, full-time, satisfactory experience in Information Technology (IT) including applications development, systems development, data communications and networking, database administration, data processing, or user services. At least eighteen (18) months of this experience must have been in an administrative, managerial or executive capacity in the areas of applications development, systems development, data communications and networking, database administration, data processing or in the supervision of staff performing these duties; or

1. A baccalaureate degree from an accredited college or university and four (4) years of progressively more responsible, full-time, satisfactory experience as described in “1” above; or

2. A four-year high school diploma or its educational equivalent, and six (6) years of progressively more responsible, full-time, satisfactory experience as described in “1” above; or

3. A satisfactory combination of education and experience equivalent to “1”, “2” or “3” above. However, all candidates must have at least a four-year high school diploma or its educational equivalent and must possess at least three (3) years of experience as described in “1” above, including the eighteen (18) months of administrative, managerial, executive or supervisory experience as described in “1” above.

In the absence of a baccalaureate degree, undergraduate credits may be substituted for a maximum of two (2) years of the required experience in IT on the basis of 30 semester credits for six (6) months of the required experience. Graduate credits in computer science may be substituted for a maximum of one (1) year of the required experience in IT on the basis of 30 graduate semester credits in computer science for one (1) year of the required IT experience. However, undergraduate and/or graduate credits may not be substituted for the eighteen (18) months of experience in an administrative, managerial, executive, or supervisory capacity as described in “1” above.

Preferred Skills

• Bachelor’s degree, from an accredited college or university with an emphasis in information security, computer science, information systems, computer engineering, or a related field. - 12 years of experience which includes demonstrated substantial responsibility for comprehensive security program management, as well as responsibility for planning, administering, and ensuring effective and secure large-scale information security operations covering applications, mainframe, servers, voice and data network, Internet, or other systems. - Advanced to expert level knowledge and understanding of information security architecture, information security technologies, tools, practices, and controls. - Current Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM) CCIE (Security). - Experience working effectively and collaboratively as a leader within an information technology governance model, especially in the public sector. - Exceptional communication skills. - Extensive knowledge guiding Cyber Security and Network Infrastructure Architecture unit and working with other units for the Cyber Security Program: Finance (Cyber Security Governance, Identity Access Management, and Security Operation Center). - Experience with operations, services, concepts, terms, and activities common to a comprehensive, state-of-the-art information systems security program. - Knowledge of the current regulatory requirements best practices and standard procedures for forensics and assessments. - Knowledge of the functional structures of various operating systems components and associated security features. - Knowledge and experience with Application architecture and design of Data network security.

NYC Department of Finance (DOF) is responsible for administering the tax revenue laws of the city fairly, efficiently, and transparently to instill public confidence and encourage compliance while providing exceptional customer service.

DOF’s Finance Information Technology (FIT) Division designs, builds, and supports all facets of DOF’s computer systems, including hardware, software, applications, infrastructure, telephone, and data security. FIT delivers and administers tax-related payment programs for the City of New York by providing the information technology solutions needed to achieve its mission of collecting revenue while ensuring an efficient and improved customer experience. FIT is also responsible for the systems and websites which enable citywide payments, land records, property assessment, parking adjudications, customer service, and the Sheriff’s public safety work.