Information Security Manager

Information Security Manager

The position is located in the Technology Security Division of the Information Technology Department within the City of Oklahoma City and reports to the Chief Information Security Officer. The Information Security Manager is primarily responsible for implementing new security efforts and managing existing city-wide security efforts; and managing risk assessment, risk mitigation and system recovery plans essential to ensure a desired level of information system readiness to support continuity of government operations.

Essential Job Functions include identifying and fostering skills needed to implement, maintain, and use technology; overseeing and managing problem resolution for enterprise level issues; assessing risk associated with technical decisions and making appropriate recommendations based on risk; developing strategic vision for cybersecurity at the department level that aligns with business strategies; conducting research and formulating new theories and concepts to solve problems with technology systems;

developing long-range goals, planning and methodologies for emerging technologies; directing and coordinating all activities associated with providing cybersecurity support to City systems; coordinating user training of City staff in security policy and compliance; developing program goals and objectives and preparing various administrative reports and budgets; collaborating with system users, departmental managers, technical staff, vendor representatives, and administrators from other agencies;

performing designee functions in the absence of the Chief Information Security Officer; and performing other duties as assigned.

Minimum Qualifications include a minimum of eight (8) years progressively responsible experience in Cybersecurity; a Bachelor's degree or higher in Management Science and Computer Systems, Management Information Systems, Cybersecurity, or field related to the position; or equivalent combination of education and experience, substituting one year of experience in Cybersecurity for each year of education required; and possession of a current Cybersecurity certification.