Senior Information Technology Security Analyst

ESSENTIAL JOB FUNCTIONS
Essential functions are the basic job duties that an employee must be able to perform, with or without reasonable accommodation. The list of essential functions, as outlined herein, is intended to be representative of the tasks performed within this classification. The omission of a function does not preclude management from assigning essential duties not listed herein if such duties relate to the position.

Designs, implements and supports secure information security architecture for the City of Fort Lauderdale.
Provides cybersecurity governance, risk, compliance, and audit assessments in support of CJIS, PCI-DSS, HIPAA, NIST, and other applicable requirements.
Develops, reviews, and maintains cybersecurity policies, procedures, and standards to meet regulatory requirements and improve security and operational effectiveness.
Serves as a technical lead for cybersecurity initiatives by coordinating project activities and providing cybersecurity subject matter expertise.
Leads project implementation with large groups of people from varying departments.
Evaluates the cybersecurity impact of proposed projects and initiatives on the City’s technology environment.
Researches emerging threats, vulnerabilities, and attack techniques and evaluates their potential impact on the City’s technology environment.
Supports cybersecurity awareness initiatives and provides security guidance and education to City employees and stakeholders.
Reviews proposed technologies, including cloud and Artificial Intelligence solutions, to ensure appropriate cybersecurity controls, privacy safeguards, and risk mitigation measures are incorporated.
Conducts cybersecurity risk assessments of systems, applications, cloud services, and third-party vendors, and leads the City’s vendor cybersecurity risk management program.
Coordinates vulnerability management activities, including risk prioritization, remediation tracking, and exception management.
Documents security concerns and communicates significant cybersecurity risks and incidents to appropriate leadership in a timely manner.
Assists in the testing, selection, placement, implementation, documentation, operation, and maintenance of various information security technologies.
Maintains logs and writes reports regarding information security activities.
Plans, coordinates, manages, or performs internal and external security assessments, audits, and evidence-gathering exercises.
Provides technical guidance, mentorship, and cybersecurity subject matter expertise to less experienced Security team members and serves as an escalation point for complex security issues.
Leads cybersecurity incident response activities, coordinates remediation efforts, and provides post-incident recommendations to reduce organizational risk.
Keeps apprised of latest developments and updates in information security technology.
Performs related work as required.
JOB REQUIREMENTS, PREFERENCES & WORK ENVIRONMENT
MINIMUM JOB REQUIREMENTS:

Bachelor’s Degree in Information Technology, Computer Science, Management Information Systems or a related field.
Five (5) to Seven (7) years of experience in the design, implementation, and support of enterprise-wide IT security programs (hardware, software, policies and procedures) including writing and auditing of policy, procedures and standards, and at least one (1) year of supervisory experience. Additional qualifying experience or completion of coursework at an accredited college or university in a job-related field, may substitute on a year-for-year basis for the required experience or education.
To claim Veterans’ Preference, candidates must attach to the application a copy of military separation papers (DD214) and service-connected disability documentation (if applicable) to meet eligibility requirements as stipulated by Florida Statues. For additional information, please refer to the Florida Department of Veterans’ Affairs.