Senior Information Technology Security Analyst

The person in this role designs, implements, and supports a complete Information Security program, consisting of hardware, software, policies and procedures, which ensures the confidentiality, integrity and availability of all information systems in the City of Fort Lauderdale network. This program encompasses many departments such as, Police, Fire, and SCADA networks. Supervises support staff and evaluates operating policies and procedures and makes recommendations to improve security and operating efficiency and productivity.

This job classification is included within the bargaining unit represented by Federation of Public Employees and therefore is subject to the terms and conditions of the Collective Bargaining Agreement between the City of Fort Lauderdale and Federation of Public Employees.

This is a Management Category II position which includes eight(8) additional Management Vacation Days and a Vehicle Allowance of $340/month.

Essential functions are the basic job duties that an employee must be able to perform, with or without reasonable accommodation. The list of essential functions, as outlined herein, is intended to be representative of the tasks performed within this classification.   The omission of a function does not preclude management from assigning essential duties not listed herein if such duties relate to the position.

• Designs, implements and supports secure information security architecture for the City of Fort Lauderdale.
• Provides cybersecurity governance, risk, compliance, and audit assessments in support of CJIS, PCI-DSS, HIPAA, NIST, and other applicable requirements.
• Develops, reviews, and maintains cybersecurity policies, procedures, and standards to meet regulatory requirements and improve security and operational effectiveness.
• Serves as a technical lead for cybersecurity initiatives by coordinating project activities and providing cybersecurity subject matter expertise.
• Leads project implementation with large groups of people from varying departments.
• Evaluates the cybersecurity impact of proposed projects and initiatives on the City's technology environment.
• Researches emerging threats, vulnerabilities, and attack techniques and evaluates their potential impact on the City's technology environment.
• Supports cybersecurity awareness initiatives and provides security guidance and education to City employees and stakeholders.
• Reviews proposed technologies, including cloud and Artificial Intelligence solutions, to ensure appropriate cybersecurity controls, privacy safeguards, and risk mitigation measures are incorporated.
• Conducts cybersecurity risk assessments of systems, applications, cloud services, and third-party vendors, and leads the City's vendor cybersecurity risk management program.
• Coordinates vulnerability management activities, including risk prioritization, remediation tracking, and exception management.
• Documents security concerns and communicates significant cybersecurity risks and incidents to appropriate leadership in a timely manner.
• Assists in the testing, selection, placement, implementation, documentation, operation, and maintenance of various information security technologies.
• Maintains logs and writes reports regarding information security activities.
• Plans, coordinates, manages, or performs internal and external security assessments, audits, and evidence-gathering exercises.
• Provides technical guidance, mentorship, and cybersecurity subject matter expertise to less experienced Security team members and serves as an escalation point for complex security issues.
• Leads cybersecurity incident response activities, coordinates remediation efforts, and provides post-incident recommendations to reduce organizational risk.
• Keeps apprised of latest developments and updates in information security technology.
• Performs related work as required.

MINIMUM JOB REQUIREMENTS:

1. Bachelor's Degree in Information Technology, Computer Science, Management Information Systems or a related field.
2. Five (5) to Seven (7) years of experience in the design, implementation, and support of enterprise-wide IT security programs (hardware, software, policies and procedures) including writing and auditing of policy, procedures and standards, and at least one (1) year of supervisory experience. Additional qualifying experience or completion of coursework at an accredited college or university in a job-related field, may substitute on a year-for-year basis for the required experience or education.
3. To claim Veterans’ Preference, candidates must attach to the application a copy of military separation papers (DD214) and service-connected disability documentation (if applicable) to meet eligibility requirements as stipulated by Florida Statues. For additional information, please refer to the Florida Department of Veterans' Affairs. 

  
Preferences:

1. Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), Certified Cloud Security Professional (CCSP), or other relevant cybersecurity certifications.

2. Experience with cybersecurity architecture and engineering; vulnerability management; incident response; vendor risk management; cloud security; Microsoft 365 and Entra ID security; email security; endpoint detection and response (EDR/XDR); security information and event management (SIEM) platforms; intrusion detection and prevention systems (IDS/IPS); Active Directory security; disaster recovery (DR) and business continuity planning (BCP); Operational Technology (OT) and SCADA security; and cybersecurity compliance frameworks including CJIS, PCI-DSS, HIPAA, and NIST.

The City of Fort Lauderdale receives a high volume of applications, so not every applicant who meets the minimum qualifications will be guaranteed an interview. Candidates are selected for interviews based on how closely their education and work experience match the specific requirements of the position.

Applicants will be subject to an extensive selection and screening process, which may include, but not be limited to evaluation of training and experience; written; oral and performance-based testing; skills assessment; interview; employment check, background investigation; medical examination; and drug screen. For Public Safety positions, the process additionally includes polygraph examinations and psychological evaluations. The expected duration of the selection process varies by position.

All applicants, including current City of Fort Lauderdale employees, need to fully detail their work experience on the employment application. Applicants must ensure that all required documents submitted are in a format that is acceptable, clear, and legible. It is the applicant’s responsibility to update their online profile with accurate personal information, work history, education, and certifications each time they submit a new application. Incomplete applications may result in disqualification. 

The City of Fort Lauderdale is an Equal Opportunity, Veteran’s Preference Employer and Drug Free Workplace.

For technical support with your application, contact GovernmentJobs.com from 9 am to 9 pm EST, Monday to Friday, at (855) 524-5627 or email [email protected].