Information Technology Security Officer

City of Carson
Carson, CA, United States
3 months ago
Apply on indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
$160,597.0 - $204,963.0
Working hours
Shift work
Job source

Tech stack

Cyber Security Information Systems Computer Networks Computer Terminals Data Security Network Connections Software Vulnerability Management Information Technology Network Server Vulnerability Analysis

Job description

The ideal candidate will be a highly seasoned professional with a strong background working in a government agency or supporting public-sector clients. They will bring proven applied experience leading enterprise-level cybersecurity programs and possess deep expertise in cybersecurity incident response, vulnerability remediation, and cybersecurity risk assessment. In addition to their cybersecurity experience, they will have a strong background in network engineering, system administration with a focus on improving reliability due to implementation of cybersecurity and IT best practices., The purpose of this classification is to ensure the security operation of the City’s data, computer systems, servers, and network connections. Employees in this classification are responsible for developing, planning, organizing, managing, implementing, maintaining, and performing cybersecurity risk analysis of systems; scrutinizing network traffic; establishing vulnerability scans; checking server and firewall logs; conducting user activity audits, and troubleshooting, as well as also analyzing and resolving security breaches and vulnerability issues in a timely and efficient manner This position will assist with developing IT security policies. Work is performed under general direction of the Director of Information and Technology with considerable latitude for the use of initiative and independent judgment. EXAMPLE OF DUTIES Essential Duties and Responsibilities:

(These functions are representative and may not be present in all positions in the class. Management reserves the right to add, modify, change or rescind related duties and work assignments.)

  • Plans, organizes, manages, and participates in the development, implementation, and monitoring of the City’s information security programs, information technology risk management programs, and information security policies; supervises and reviews the work of professionals and serves as a subject matter expert in information security.
  • Develops and executes a cyber security strategy that is aligned with internal stakeholders, organizational priorities, facilitates city operations, and meets industry standards.
  • Directs and participates in the identification of security risks, development and implementation of security management practices, and the measurement and monitoring of security protection measures.
  • Ensures compliance with regulatory requirements such as Criminal Justice Information Services (CJIS), Payment Card Industry Data Security Standards (PCI), Health Insurance Portability and Accountability Act (HIPAA), California Privacy Protection Agency, and federal, state, and local laws.
  • Monitors agency infrastructure, devices, and information systems for security integrity; provides planning and guidance to information technology staff on vulnerability management and security incident response procedures.
  • Oversees portfolio of cyber risk and security applications and procedures, implements new security processes and related technologies to ensure a continuous improvement of the City’s cyber security posture.
  • Oversees assigned staff in performing their responsibilities and provides guidance as necessary.
  • Analyzes information, situations, problems, policies, and procedures to identify, recommend, and implement solutions systemically.
  • Formulates, recommends, and executes enterprise-wide policies and procedures for detecting, deterring, and mitigating information security threats.
  • Serves as a subject matter expert and internal consultant on data security implications for proposed information technology projects and programs and makes recommendations to align new technologies to security standards.
  • Prepares oral and written reports for executive leadership, the City Manager’s Office, and City Council.
  • Develops cyber security, cyber risk, and security awareness training programs for City staff; monitors training effectiveness by documenting and reporting data point trends on user awareness and vulnerability assessments.
  • Builds and maintains positive relationships with City stakeholders.
  • Attends City/Industry-related functions.
  • Performs other duties as required

SUPPLEMENTAL INFORMATION Physical Requirements and Working Conditions: Employee accommodation(s) for physical or mental disabilities will be considered on a case-by-case basis. Positions in this class normally:

  • Require vision (which may be corrected) to read small print.
  • Require mobility of arms to reach and dexterity of hands to grasp and manipulate small objects.
  • Perform work which is primarily sedentary.
  • Is subject to the internal environmental conditions of modern and aged public buildings, facilities and physical structures and HVAC systems.
  • May be required to work at a computer terminal for prolonged periods.
  • May be required to work evenings and/or weekends.

Recruitment Process: This recruitment will close at 11:59 pm on July 03, 2026. The City of Carson reserves the right to close this recruitment at any time once a sufficient number of qualified applications have been received. To be considered, please submit an online application, including a cover letter, resume, and proof of education in PDF format. Applications that fail to include all necessary documents will be considered incomplete and will not be taken into consideration. Applications will be reviewed for depth and breadth of experience, and for level and relatedness of education. The most qualified candidates will be invited to participate in the recruitment process, which will consist of the following sections:

  • SME Review, no weight
  • Oral Exam, weighted 100%
  • Final Selection Interview

The Human Resources Department reserves the right to adjust, modify, delete and/or change the above exam types and/or weights. Supplemental questionnaires are used to evaluate applicant’s indicated abilities with the ideal candidate profile. The Human Resources Department reserves the right to invite those amongst the highest scoring to the next phase of the recruitment. Appointment: Any offer of employment, or acceptance of an employment offer, is contingent upon passing live scan, background check and other required tests. All new employees are required to take a loyalty oath. Other Information: The City of Carson is an Equal Opportunity Employer, dedicated to fostering a diverse and inclusive workplace. We believe in the strength that comes from different perspectives and experiences, and we are committed to building a workforce that reflects the vibrant diversity of our community. This commitment is embraced at all levels of our organization, from our management staff to our policymakers. We partner with our staff and community organizations to ensure our policies and practices remain transparent and equitable. As part of this commitment, we regularly publish updated demographic information on our workforce, including data on diversity and pay equity by race and gender.

Requirements

Do you have experience in Vuls?

About the company

Vacancy InformationThere is one (1) current full-time (FLSA: Exempt) vacancy with a 4/10 schedule, working Monday through Thursday from 7:00 a.m. to 6:00 p.m. (including a 1-hour unpaid lunch break). Work hours and/or the work schedule may be adjusted based on the operational needs of the City. This position is fully on-site. Remote work is not available for this position.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:04 min

Embedding data security and applied ethics into developer education

Daniel Tao +3 · World Congress 2024

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

3:50 min

Queues in TCP stacks and continuous network connections

Clemens Vasters Clemens Vasters · World Congress 2022

1:18 min

Overcoming enterprise network and platform security challenges

Oliver Zimmert · LIVE

1:57 min

Following security research and continuous developer education

Martin Schmiedecker · LIVE

41 sec

Massive client data loss and bio-digital storage

Chris Heilmann +1 · LIVE

Videos

See all

Related articles

See all