> Markdown version of [/jobs/ext/4542000-information-technology-specialist-4-information-security-ref-24](https://www.wearedevelopers.com/jobs/ext/4542000-information-technology-specialist-4-information-security-ref-24). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Technology Specialist 4 Information Security ref#24

- **Company:** NYS Governor's Office of Employee Relations
- **Location:** New York, NY, United States (Remote available)
- **Salary:** $100,671.0 - $126,875.0
- **Contract:** Internship / Graduate position
- **Skills:** Cyber Security, Information Technology
- **Published:** November 3, 2026
- **Apply:** https://statejobsny.com/public/vacancyDetailsView.cfm?id=228156

## About the Role

Information Technology Specialist 4 (Information Security)
Non-competitive: Six years of information technology, cyber security, or information assurance experience**
Or
One year of state service as an Information Technology Specialist 3 (Information Security)

**Substitutions:
A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor's substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor's degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master's degree or higher in computer science or related field substitutes for one year of required experience.

## Description

Duties Description Under the direction of senior team members within the Chief Information Security Office (CISO)/Cybersecurity Governance & Compliance (CGC)/Governance & Compliance (GC) Section, the incumbent will be responsible for development and implementation of the Chief Information Security Office's Exception Management Program. The Program primarily supports the management of exceptions submitted based on the statewide information security policies, standards, and guidelines to protect New York State information assets. Additional activities of the Governance & Compliance section include reviewing policy, assessing requests for security information during Internal and External Audits, and working with ITS and with other State entities to ensure compliance with all State and Federal standards. The candidate will also work to promote cybersecurity awareness and information security "best practices".

The position requires communicating orally and in writing with various individuals including management, users, vendors, and other IT staff. The position will be part of the CISO Incident Response program and may require availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.

Specific duties include, but are not limited to:

 * Contribute and understand current and future statewide information security policies, standards, processes, and procedures.
 * Lead the Exception Management team in aggressively managing the periodic review of information security policies exceptions.
 * Act as the Policy SME within CISO supporting other bureaus and sections within the division to understand and implement NYS exception processes.
 * Consult with State Entities regarding interpretation and implementation of statewide information security policies, procedures, and best practices.
 * Manage the security exception review process for NYS Policy and Standard compliance
 * Alongside other CISO staff, provide subject matter expertise for internal and external information security audits across the enterprise. This requires working in conjunction with multiple teams across ITS and State Entities.
 * Continuously identify opportunities to streamline and improve the CISO policy review process, tools, and documentation. Develop and update procedural documentation related to exception management.
 * Assist during internal and external audits by providing accurate and comprehensive documentation related to information security policies and standards and policy exceptions.
 * Perform the full range of supervisory responsibilities.
 * Perform additional duties as required.