Information Technology Manager; Information Security Officer); Unclassified

This employee directs, manages, supervises, and coordinates the activities and operations of the assigned division within the Enterprise Technology Solutions department. The employee leads citywide information security policy development, programming, networking education and awareness, compliance, and enforcement efforts. Employee also manages security breach response activities, facilitates city cyber defense and risk analysis initiatives, and contributes to the development and implementation of the organizations disaster recovery and business continuity plans for all critical business systems and infrastructures.

Employee stays current on cybersecurity trends, tools, and best practices and utilizes the latest information security technologies to improve the city's cyber defense capabilities. Employee coordinates assigned activities with other divisions, departments, and outside agencies and provides highly responsible and complex administrative support to the Enterprise Technology Solutions Department Director. Performs related duties as required.

(Illustrative only. Any one position may not require all of the listed KSAs nor do the listed examples include all the KSAs which may be required.)

• Principles and practices of program development and policy administration.
• Current and emerging information security trends, threats, tactics, and cyber defense mechanisms.
• IT security principles, information security assessment methods, enterprise level security and network monitoring tools, and investigative techniques.
• System documentation, report writing, technical writing, and public speaking.
• Principles and practices of municipal budget preparation and administration. Principles of management, supervision, training, and performance evaluation. Pertinent federal, state, and local laws, codes, and regulations.
• Information technology systems, hardware and software; implementation of systems. Mainframe, personal computer, client-server operations, and local/wide-area networks. State-of-the-art computer software/hardware for geographic information systems. Complex information directly related to assigned area of responsibility.
• Principles and practices of practices of project management.
• Principles and practices of networking (metro, wide area, and local area network).
• Technologies and trends, including active directory, IT security, tools.

• Identify security requirements for city IT systems and infrastructures.
• Improve citywide information security protection and detection capabilities.
• Conduct network intrusion and penetration tests to assess city security defense systems.
• Define and implement security policies and procedures that reduce risk and improve citywide cyber defenses.
• Operate appropriate computer equipment; use properly all related hardware and software.
• Operate assigned vehicle in the course of duty.

• Collaborate with city leadership and all city departments to develop and lead comprehensive citywide information security program.
• Advise city leadership during and information security event and lead city security breach response efforts.
• Implement and maintain positive employee relations.
• Promote and maintain highest integrity throughout all personnel.
• Analyze and manage effective EEO/AA programs.
• Oversee, direct and coordinate the work of lower level staff.
• Select, supervise, train, and evaluate staff.

• Assumes management responsibility for assigned services and activities of the Regional Computer Center.
• Manages and participates in the development and implementation of goals, objectives, policies, and priorities for assigned programs; recommends and administers policies and procedures.
• Monitor their organization’s networks for security breaches and investigate a violation when one occurs.
• Install and use software, such as firewalls and data encryption programs, to protect sensitive information.
• Prepare reports that document security breaches and the extent of the damage caused by the breaches.
• Conduct penetration testing, which is when analysts simulate attacks to look for vulnerabilities in their systems before they can be exploited.
• Research the latest…