Systems Analyst - Cybersecurity

City of Torrance is recruiting for a Systems Analyst - Cybersecurity to be part of the Information Technology Team.

Information Technology Department is responsible for the administration of the City’s information and communications systems and infrastructure. Services include planning, procurement, delivery, maintenance and training which support business functions of City departments through technology. Department responsibilities include computer hardware systems, data and telecomm infrastructure, data management, information security, radio and wireless communications, software and applications, telephone and voice systems.

The Systems Analyst - Cybersecurity performs advanced duties in design, implementation, and support of the City’s information and communications technologies. The position serves as a subject matter expert in cybersecurity, providing technical leadership, systems integration expertise, and operational guidance. Responsibilities include conducting complex systems analysis, developing technology solutions, ensuring compliance with security and regulatory requirements, and optimizing business processes across City departments.

The Systems Analyst - Cybersecurity leads the design, implementation, and continuous improvement of the City’s cybersecurity program, including incident response, vulnerability management, and security awareness training; monitors, analyzes, and responds to cybersecurity events using SIEM, IDS/IPS, and other advanced security monitoring tools; develops, implements, and enforces cybersecurity policies, standards, and procedures to ensure compliance with federal, state, and local regulations (e.g., CJIS, HIPAA, NIST, CCPA);

conducts risk assessments, penetration testing, and security audits of enterprise systems, networks, and cloud environments; oversees incident response activities, including forensic investigations, containment, eradication, and recovery efforts, while preparing after-action reports; provides technical leadership and mentorship to junior analysts and IT staff in cybersecurity best practices; and performs related duties as required.

Any combination of education, training, and experience that provides the required knowledge and skills is qualifying. A typical way to obtain the knowledge and skills would be a Bachelor’s degree in Computer Science, Information Technology, or a closely related field; and five (5) to seven (7) years of progressively responsible professional experience in information technology, including areas such as systems analysis, applications and database support, infrastructure management, cybersecurity, or data analytics;

or an equivalent combination of training and experience. At least one (1) year of supervisory or lead experience is highly desired.

Must possess and maintain a valid California Class C driver’s license. Certifications in one or more cybersecurity domains including governance and risk management, security operations, incident response and forensics, penetration testing, cloud security, network and infrastructure security, and compliance with government and regulatory requirements are highly desired.

• Advanced expertise in cybersecurity operations and architecture, including incident response, vulnerability management, threat monitoring, and security program development in complex enterprise environments.
• Demonstrated experience implementing and managing security technologies such as SIEM, IDS/IPS, endpoint detection and response (EDR), identity and access management (IAM), and multi‑factor authentication systems.
• Strong knowledge of cybersecurity frameworks and regulatory requirements, including standards such as NIST, CJIS, HIPAA, and state privacy regulations (e.g., CCPA), with experience ensuring organizational compliance.
• Proven ability to conduct risk assessments, security audits, and penetration testing, and to develop remediation strategies that strengthen organizational resilience.
• Experience leading complex cybersecurity projects and initiatives, including planning, implementation, system integration, and…