Information Technology Security Officer

About the position

The Information Technology Security Officer is a pivotal role within the City of Modesto's Information Technology Department, responsible for overseeing, monitoring, implementing, and supporting information system security to protect the integrity of the City's networks, systems, applications, and data. This position requires a comprehensive understanding of IT security practices, as well as the ability to manage the design and implementation of security policies and processes. The officer will coordinate activities with various divisions and departments, ensuring that security measures are effectively integrated across the organization. Additionally, the role involves providing highly responsible technical support to the Chief Information Officer, making it essential for the officer to possess strong communication and collaboration skills. In this role, the officer will actively monitor system performance, architecture changes, and upgrades to proactively avert potential problems. They will also be responsible for reviewing, implementing, updating, and documenting City-wide information security policies and procedures. The officer will establish performance standards and methods for providing technical and professional IT support to City departments, ensuring that security protocols are adhered to and that staff are trained in best practices. The officer will secure enterprise information by designing, implementing, and enforcing security controls, safeguards, policies, and procedures. They will review and assure that security standards and procedures are reasonable and adequate, verifying that security measures are functional, maintained, and tested. Furthermore, the officer will develop and execute security awareness orientation and training programs, ensuring that all staff are informed about potential security risks and the importance of compliance with security policies. The position also involves participating in budget preparation and administration, preparing cost estimates for budget recommendations, and monitoring and controlling expenditures. The officer will manage complex business changes in the implementation of emerging information technologies, interface with appropriate department staff to define systems standards and operating procedures, and utilize current and emerging networking, communications, or operating system technologies. Overall, the Information Technology Security Officer plays a crucial role in safeguarding the City's information assets and ensuring the smooth operation of its IT infrastructure.

Responsibilities

• Oversee, design, select, implement and maintain technical and organizational security controls to ensure the confidentiality, integrity, security, and availability of assets, information, data, and services.
• Actively monitor systems performance, architecture changes, and upgrades to proactively avert potential problems; monitor the City's networks for security breaches and investigate violations when they occur.
• Review, implement, update and document City-wide information security policies and procedures; recommend and implement goals and objectives; establish performance standards and methods for providing technical and professional information technology support to City departments.
• Plan, develop, and oversee the work of staff involved in the performance of professional and technical information technology functions.
• Evaluate operations and activities of assigned section; implement improvements and modifications; prepare various reports on operations and activities.
• Secure enterprise information by designing, implementing, and enforcing security controls, safeguards, policies, and procedures.
• Review and assure security standards and procedures are reasonable and adequate; verify security measures and procedures are functional, maintained and tested.
• Serve as security information resource to staff, identifying security issues and recommending risk-reduction solutions; provide confidential services, as requested.
• Develop, produce, and execute security awareness orientation and training programs.
• Assume a key role in the execution of professional IT consulting/development projects; oversee the work of contractors involved with City IT projects and systems; correspond and collaborate with third-party applications, vendor sales, and support.
• Participate in budget preparation and administration; prepare cost estimates for budget recommendations; submit justifications for staffing, equipment, materials, and supplies; monitor and control expenditures.
• Participate in the selection of staff; coordinate staff training; conduct performance evaluations; recommend discipline; implement discipline procedures, as directed.
• Use formal project management techniques and tools to effectively manage the scope of work, project costs, technical resources, and maintain schedule integrity; utilize project management software; make modifications and adjustments to ensure projects are delivered on time and within budget, as required.
• Manage complex business changes in the implementation of emerging Information Technologies.
• Interface with appropriate department staff in defining systems standards and operating procedures.
• Utilize current and emerging networking, communications, or operating system technologies.
• Carry out business process analysis/re-engineering, using a formal and proven methodology.
• Review system design and end-user documentation prepared by other project staff.
• Answer questions and provide information to the public; investigate complaints and recommend corrective action to resolve complaints, as necessary.
• Build and maintain positive working relationships with co-workers, other City employees, and the public using principles of good customer service.
• Observe and maintain a safe working environment in compliance with established safety programs and procedures.

Requirements

• Four years of increasingly responsible experience installing, implementing, and monitoring of communications or operating system software and hardware, performing network administration, maintaining high-end computing platforms, automated business systems, and implementing new systems, including one year of supervisory responsibility.
• Equivalent to a Bachelor's degree from an accredited college or university with major course work in a computer related field, business information systems, public administration, business administration, or a related field.
• Possession of, or the ability to obtain, a valid California driver's license.

Nice-to-haves

• Knowledge of information security policies, regulations, and requirements.
• Principles and practices of administering network security.
• Principles of incident response, disaster recovery, and forensics.
• Principles and practices of technology advancements and how they can/will be applied within the current/future business models.
• Information Technology best practices and quality assurance programs.
• Project management methodologies, including project estimating, planning, executing, and examining business or functional issues including technical, operational, and management concerns.

Benefits

• Salary range of $104,520.00 - $127,025.60 Annually with upcoming salary increases and incentives.
• 2.5% Education Incentive for Bachelor's Degree.
• 5% Education Incentive for Master's Degree.