Information Technology Specialist Information Security

Overview

Duties Description Under the direction of senior team members within the Chief Information Security Office/Information Security Engineering/IISO Support section, the position will be a member of a IISO team that provides security services to one or more ITS groups, and other CISO teams. The incumbent may supervise subordinate staff and will act as a team member providing in-depth information security consulting and services aligned with business needs of the ITS and its client agencies to ensure confidentiality, integrity, and availability of information and systems.

Description Under the direction of senior team members within the Chief Information Security Office/Information Security Engineering/IISO Support section, the position will be a member of a IISO team that provides security services to one or more ITS groups, and other CISO teams. The incumbent may supervise subordinate staff and will act as a team member providing in-depth information security consulting and services aligned with business needs of the ITS and its client agencies to ensure confidentiality, integrity, and availability of information and systems.

The position requires an incumbent to act with a great deal of independence in alignment with CTO and upper-level CISO management strategic direction. The position requires technical expertise in a broad range of areas to permit working directly with technical teams throughout ITS. The position requires communicating orally and in writing with various individuals including management, users, vendors, and other IT staff.

The incumbent will have to work with ITS teams and upper-level agency management to resolve technically complex and politically sensitive issues under pressure. The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.

• Conduct detailed technical security reviews of systems and architecture.
• Identify risks in new and existing system design and architecture.
• Participate in work groups to develop solutions and standards for IT systems.
• Provide recommendations for secure/hardened configurations of servers, platforms, networks, and other IT systems.
• Manage and resolve security threats to agency information systems.
• Serve as information security expert and evaluate systems and contracts for alignment with agency and State information security policies.
• Supervise staff and resources dedicated to the team.
• Monitor and maintain awareness of information security industry trends, tools, and techniques.
• Maintain an adequate level of current knowledge and proficiency in information security through annual Continuing Professional Education (CPE) credits directly related to information security.
• Assist CISO management with overall management of division activities as needed.
• Perform additional duties as required.

Minimum Qualifications
Information Technology Specialist 3 (Information Security)
Non-competitive: five years of information technology, cybersecurity, or information assurance experience.

• Substitutions: A bachelor’s or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor’s substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience.
  
  Candidates in a bachelor’s degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master’s degree or higher in computer science or related field substitutes for one year of required experience.

• Good oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding
• Demonstrated critical thinking, problem solving and analytical skills
• Demonstrated…