Director, Cyber Security Engineering

Benefits

Additional Information

IMPORTANT NOTE: CANDIDATES MUST BE PERMANENT IN THE COMPUTER SYSTEMS MANAGER CIVIL SERVICE TITLE OR ARE REACHABLE ON THE CURRENT OPEN COMPETITIVE EXAM NO.4035. PLEASE INCLUDE YOUR EMPLOYEE IDENTIFICATION NUMBER (EIN) WHEN APPLYING AND INDICATE IN YOUR COVER LETTER YOUR PERMANENT CIVIL SERVICE TITLE OR INDICATE YOUR LIST NO. FOR EXAM NO. 4035. NYC Department of Finance (DOF) is responsible for administering the tax revenue laws of the city fairly, efficiently, and transparently to instill public confidence and encourage compliance while providing exceptional customer service. DOF's Finance Information Technology (FIT) Division designs, builds, and supports all facets of DOF's computer systems, including hardware, software, applications, infrastructure, telephone, and data security. FIT delivers and administers tax-related payment programs for the City of New York by providing the information technology solutions needed to achieve its mission of collecting revenue while ensuring an efficient and improved customer experience. FIT is also responsible for the systems and websites which enable citywide payments, land records, property assessment, parking adjudications, customer service, and the Sheriff's public safety work. FIT's Cyber Security Unit is seeking a Director of Cyber Security Engineering. Reporting to the Chief Information Security Officer (CISO), the selected candidate must have strong organizational and team leadership skills to achieve interdepartmental compliance and to ensure that departmental IT security staff adopt and fully integrate appropriate security and privacy practices and must have extensive technical knowledge in cyber-security and information systems. Detailed knowledge of security and privacy technologies and best practices, as well as, knowledge of appropriate security methods and controls, and IT security privacy legislation and related policy issues are required. The ability to develop and maintain effective working relationships with the Agency's executive management, IT technical staff, legal staff, third-party vendors, and related industry experts is required. The selected candidate will represent the Agency's information security interests to State and Federal agencies and regulatory bodies. Responsibilities will include, but not be limited to the following: - Manage the Cyber Security Engineering team. - Develop Cyber Security policies, guidelines, and standards per NIST Cyber Security Framework. - Provide comprehensive IT security program management under DOF's CISO's guidance. - Perform complex system security design, development, analysis, and testing of all DOF's internal, hosted facilities and cloud implementation. - Evaluate network information security and develop appropriate solutions. - Research new developments in information technology and their relevance to current business needs and security strategies. - Development of strategies for secure, cloud-based services. - Project budgeting, quality assessment and control and resource management. - Implement and advocate for security best practices and security awareness - Discuss and convey complex information technology security concepts and terminology with both technical and non-technical staff at all levels within and outside the County. Additional Information: In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. This position may be eligible for remote work up to 2 days per week, pursuant to the Remote Work Pilot Program agreed between the City and the Collective Bargaining Unit representing employees serving in the civil service title. COMPUTER SYSTEMS MANAGER - 10050 1. A master's degree in computer science from an accredited college or university and three (3) years of progressively more responsible, full-time, satisfactory experience in Information Technology (IT) including applications development, systems development, data communications and networking, database administration, data processing, or user services. At least eighteen (18) months of this experience must have been in an administrative, managerial or executive capacity in the areas of applications development, systems development, data communications and networking, database administration, data processing or in the supervision of staff performing these duties; or 2. A baccalaureate degree from an accredited college or university and four (4) years of progressively more responsible, full-time, satisfactory experience as described in "1" above; or 3. A four-year high school diploma or its educational equivalent, and six (6) years of progressively more responsible, full-time, satisfactory experience as described in "1" above; or 4. A satisfactory combination of education and experience equivalent to "1", "2" or "3" above. However, all candidates must have at least a four