Cybersecurity Administrator

Cybersecurity Administrator

Department: Information Technology

FLSA Status: Exempt

Annual Salary: $62,244.19 - $70,056.39

This position answers to the Director of Information Technology. Responsibilities include for the overall cybersecurity posture of the City of Gulfport. This role leads the implementation, management, and continuous improvement of the City's cybersecurity program, including threat detection and response coordination, identity and access management, regulatory compliance (including CJIS), data protection, and user security awareness.

This position serves as the primary administrator and internal owner of the City's Managed Detection and Response (MDR) platform and associated security tooling, ensuring proper configuration, monitoring, and response to threats across all systems. The Cybersecurity Administrator works closely with internal IT staff, City departments, law enforcement stakeholders, and external vendors to proactively identify risks, mitigate vulnerabilities, and ensure compliance with applicable standards and regulations.

This position is classified as Essential. Essential status is defined as employees whose duties are vital to maintain basic municipal functions during an emergency.

• Oversees security operations and threat management. This includes but is not limited to administering and managing the City's cybersecurity platform, including managed detection and response (MDR) services. This position will also monitor, analyze and respond to security alerts and suspicious activity, serve as the liaison with MDR provider for escalation, investigation and remediation, conduct endpoint, network and identity based thread investigations, coordinate containment, eradication and recovery efforts during security incidents, identify and mitigate enhanced AI threats through advanced detection tools and user awareness training.
• Manages incident response and cyber recovery. This includes leading the City's cyber security incident response program in alignment with industry frameworks, developing and maintaining incident response plans, procedures and playbooks, coordinates cross-departmental response efforts during incidents, conducts post-incident reviews, implements corrective action plans and supports disaster recovery and continuity planning related to cyber events.
• Oversees vulnerability and risk management. This includes identifying, assessing and prioritizing vulnerability's across the systems, networks and applications. Will provide cloud security oversight, including Microsoft 365 and other cloud/SaaS providers. Maintain cybersecurity risk register, and provide risk-based recommendations. Perform security assessments for new systems, vendors and initiatives, coordinate and manage third-party penetration testing engagements, including scope definition, vendor selection, scheduling and oversight.
  
  Conduct follow-up validation to ensure vulnerabilities have been properly mitigated. Maintain documentation and reporting to support audit, CJIS compliance and cyber insurance requirements.
• Manages Identity and Access Management (IAM). This includes the management and enforcement of Multifaction Authentication (MFA), development and maintenance of conditional access policies and identity security controls. Oversight of role-based access control (RBAC) and enforce least privilege principles. Conducts periodic access reviews and privileged account audits and recommends / implements advanced identity protection strategies.
• Manages Data Protection & Data Loss Prevention (DLP). Oversees logging, monitoring and visibility across critical systems, platforms, network devices, services, and endpoints. Monitors log integrity, retention and availability for audit and investigative purposes.
• Ensures compliance with Criminal Justice Information Services (CJIS) security policy. Conducts regular audits and assessments of CJIS related systems and processes. Maintains documentation required for CJIS compliance and audits. Works closely with Police department stakeholders to enforce security controls. Stay current on SJIS and other applicable regulatory requirements.
• Creates and manages a comprehensive cybersecurity awareness program. Conducts phishing simulations and track user performance. Provide targeted training to reduce user risk and improve security posture. Provides reports on training effectiveness and user compliance metrics.
• Oversees security policy and governance leading the alignment of city security practices with the NIST Cybersecurity Framework (CSF), with focus on identify, protect, detect, respond and recover. Conduct annual security self-assessments based on NIST 800-53 and CIS Critical Security policies that govern data classification and system hardening. Participate in IT governance and strategic planning initiatives. Provides guidance on secure system architecture and design.
  
  Work with team to develop and maintain the City's Artificial Intelligence (AI)…