Job Description

Posting number: 26-03079 (U)

Department: Enterprise Technology Solutions

Job classification: INFORMATION TECHNOLOGY MANAGER (INFORMATION SECURITY OFFICER)

Posting type: Open

Categories: IT and Computers, Management, Miscellaneous, Project Management, Program Management, Database Administration, Software

This employee directs, manages, supervises, and coordinates the activities and operations of the assigned division within the Enterprise Technology Solutions department. The employee leads citywide information security policy development, programming, networking education and awareness, compliance, and enforcement efforts. Employee also manages security breach response activities, facilitates city cyber defense and risk analysis initiatives, and contributes to the development and implementation of the organizations disaster recovery and business continuity plans for all critical business systems and infrastructures. Employee stays current on cybersecurity trends, tools, and best practices and utilizes the latest information security technologies to improve the city's cyber defense capabilities. Employee coordinates assigned activities with other divisions, departments, and outside agencies and provides highly responsible and complex administrative support to the Enterprise Technology Solutions Department Director. Performs related duties as required.

Examples of duties

(Illustrative only. Any one position may not require all of the listed KSAs nor do the listed examples include all the KSAs which may be required.)

Knowledge of:

• Principles and practices of program development and policy administration.
• Current and emerging information security trends, threats, tactics, and cyber defense mechanisms.
• IT security principles, information security assessment methods, enterprise level security and network monitoring tools, and investigative techniques.
• System documentation, report writing, technical writing, and public speaking.
• Principles and practices of municipal budget preparation and administration. Principles of management, supervision, training, and performance evaluation. Pertinent federal, state, and local laws, codes, and regulations.
• Information technology systems, hardware and software; implementation of systems. Mainframe, personal computer, client-server operations, and local/wide-area networks. State-of-the-art computer software/hardware for geographic information systems. Complex information directly related to assigned area of responsibility.
• Principles and practices of practices of project management.
• Principles and practices of networking (metro, wide area, and local area network).
• Technologies and trends, including active directory, IT security, tools.

Skill to:

• Identify security requirements for city IT systems and infrastructures.
• Improve citywide information security protection and detection capabilities.
• Conduct network intrusion and penetration tests to assess city security defense systems.
• Define and implement security policies and procedures that reduce risk and improve citywide cyber defenses.
• Operate appropriate computer equipment; use properly all related hardware and software.
• Operate assigned vehicle in the course of duty.

Ability to:

• Collaborate with city leadership and all city departments to develop and lead comprehensive citywide information security program.
• Advise city leadership during and information security event and lead city security breach response efforts.
• Implement and maintain positive employee relations.
• Promote and maintain highest integrity throughout all personnel.
• Analyze and manage effective EEO/AA programs.
• Oversee, direct and coordinate the work of lower level staff.
• Select, supervise, train, and evaluate staff.

(Illustrative only. Any one position within this classification may not include all of the duties listed nor do the listed examples include all of the tasks which may be performed.)

Assumes management responsibility for assigned services and activities of the Regional Computer Center.
Manages and participates in the development and implementation of goals, objectives, policies, and priorities for assigned programs; recommends and administers policies and procedures.
Monitor their organization’s networks for security breaches and investigate a violation when one occurs.
Install and use software, such as firewalls and data encryption programs, to protect sensitive information.
Prepare reports that document security breaches and the extent of the damage caused by the breaches.
Conduct penetration testing, which is when analysts simulate attacks to look for vulnerabilities in their systems before they can be exploited.
Research the latest information technology (IT) security trends.
Develop security standards and best practices for their organization.
Recommend security enhancements.
Help computer users when they need to install or learn about new security products and procedures.
Consult with managers to determine the role of IT systems in an organization.
Research emerging technologies to decide if installing them can increase the organization’s efficiency and effectiveness.
Prepare an analysis of costs and benefits so that management can decide if IT systems and computing infrastructure upgrades are financially worthwhile.
Conduct testing to ensure that the systems work as expected.
Train the systems’ end users and write instruction manuals.

Qualifications

Open: Each applicant must have a bachelor's degree from an accredited college or university in information systems, computer science, computer engineering, business administration, or a related field. Each applicant must have a minimum 4 years' of related paid project management or professional management experience and administrative experience with knowledge of information systems and enterprise business systems. Master's degree will be supplemented with 2 years of relative work experience.

Promotional Each applicant must have a minimum of five years of paid experience in managing enterprise business systems and served one year as an Information Technology Assistant Manager with the City of Cincinnati plus a associate degree from an accredited college or university with major course work in information systems, management, business administration, computer engineering, computer science, geography or a related field required.

OTHER REQUIREMENTS
Security and networking experience is strongly preferred.
CISSP and Network experience is strongly preferred.
Must have a valid driver's license.
Must be an excellent communicator and team builder.

https://www.dantes.doded.mil/EducationPrograms/get-credit/creditmilitary.html

Supplemental information

Environmental Conditions:
Office environment; exposure to computer screens; travel to various locations within the City.

Physical Conditions:
Duties require maintaining physical condition necessary for sitting, standing and walking for prolonged periods of time; light lifting and carrying; manual dexterity required; must be able to operate assigned vehicle.

HR Contact: gustavo.rodriguez@cincinnati-oh.gov