Chief Information Security Officer

Chief Information Security Officer

Job Description:
This job is a top security executive. He or she will report directly to the CIO. The CISO will coordinate security efforts across the city, including information technology, security personnel, communications regarding security, law, and other departments and will identify security initiatives and standards. The candidate’s direct reports will include Security Analysts, Security Business Analysts, and the Security Program Director.

Responsibilities:
•Oversee a network of security personnel and vendors who safeguard the Clients assets, intellectual property, information systems and the physical security of Information Technology processing facilities.
•Coordinate hiring, training, and evaluation of security personnel and the development of education/training programs to ensure appropriate awareness of security policies, procedures, and standards.
•Identify protection goals, objectives and metrics consistent with the Client's strategic plan.
•Manage the development and implementation of global security policies, standards, guidelines and procedures to ensure ongoing maintenance of security.
•Maintain relationships with other localities, state and federal law enforcement and other related government agencies.
•Physical security responsibilities will include asset protection, access control systems to information processing facilities, video surveillance and more.
•Information protection responsibilities will include network security architecture, network access and monitoring policies, employee education and awareness and more.
•Oversee Incident response planning as well as the investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches as necessary.
•Work with outside consultants as appropriate for independent security audits.

Qualifications:
•Must be an intelligent, articulate and persuasive leader who can serve as an effective member of the senior management team and who is able to communicate security related concepts to a broad range of technical and non-technical staff.
•Should have experience with business continuity planning, auditing, and risk management, as well as contract and vendor negotiation.
•Must have strong working knowledge of pertinent law and the law enforcement community.
•Must have a solid understanding of information technology and information security.

Education required:
BS in Management Information Systems or related field
Working knowledge with NIST, SANS, COBIT, and ISO standards and best practices desirable
CISSP desirable

Experience Required:
10+ years in Information Technology field
5+ years in Information Security Management
Worked and/or consulted in Federal, State, City or local government desirable
REQUIREMENTS
Qualifications:
•Must be an intelligent, articulate and persuasive leader who can serve as an effective member of the senior management team and who is able to communicate security related concepts to a broad range of technical and non-technical staff.
•Should have experience with business continuity planning, auditing, and risk management, as well as contract and vendor negotiation.
•Must have strong working knowledge of pertinent law and the law enforcement community.
•Must have a solid understanding of information technology and information security.

Education required:
BS in Management Information Systems or related field
Working knowledge with NIST, SANS, COBIT, and ISO standards and best practices desirable
CISSP desirable

Experience Required:
10+ years in Information Technology field
5+ years in Information Security Management
Worked and/or consulted in Federal, State, City or local government desirable