Minimum Qualifications: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Education: Bachelor's Degree (B. A.) from four-year college or university in Management and Information Systems (MIS), Computer Science or related field.
Experience: Five (5) years’ experience implementing IT Security plans and controls of a department or enterprise IT environment and three (3) years managing a technology team required.
Licenses and Certifications:
- Must possess a Texas driver’s license within the first ninety (90) days of employment and meet the driver safety policy requirements.
- ITIL, CISSP, CISM certification a plus
Technical Skills:
- Knowledge and experience with Windows, Active Directory, group policy, DNS, encryption, patch management, anti-virus, system configuration management.
- Knowledge and experience with LAN, WAN, VPN, routers, firewalls, servers, IDS/IPS, SIEM
Summary of Duties: The Information Security Officer (ISO) will be responsible for the development and implementation of a comprehensive information security program to protect the Township from potential cyber threats. The ISO will be responsible for overseeing the Township’s information security program and ensuring its effectiveness. This individual will develop, implement, and maintain comprehensive information security policies, standards, and procedures to protect the Township from cyber threats and to comply with legal and regulatory requirements.
Essential Employee Responsibilities: During emergency conditions, subject to being called to work in the event of a disaster, such as a hurricane, or other emergency situation and are expected to perform emergency service duties, as assigned.
Essential Duties and Responsibilities:
- Create guidelines and best practices to ensure the Township’s data and systems are secure.
- Responsible for organizing and conducting security awareness training for employees to ensure they are informed of the latest threats and best practices in information security, and how to recognize and report potential threats.
- Identify, analyze, and prioritize potential threats and vulnerabilities in the Township’s information systems and develop strategies to mitigate those risks.
- Create and maintain an incident response plan, which outlines the procedures to be followed in case of a security breach or cyberattack. Manage IT response staff during an incident. Coordinate with relevant stakeholders to contain and resolve incidents. Protect the Township’s sensitive information and intellectual property.
- Ensure that the Township complies with applicable laws, regulations, and industry standards related to information security.
- Oversee internal and external audits and penetration tests to assess the effectiveness of security controls and identify areas for improvement. Minimize the risk of data breaches and cyberattacks.
- Evaluate, recommend, and implement security tools and technologies, such as firewalls, intrusion detection systems, encryption solutions, and access control systems; physical access control systems and video surveillance, to enhance the organization’s security posture.
- Work with third-party vendors and service providers to ensure they adhere to the Township’s security requirements and assess the security risks associated with their products and services.
- Collaborate with various departments to ensure that security measures are effectively integrated into daily operations.
- Stay up to date with the latest trends and advancements in information security and adapt strategies to keep the Township’s security measures up to date.
- Provide regular reports to management and stakeholders on the Township’s security status, risks, and incidents, and recommend appropriate actions to address security concerns.
- Perform other duties as assigned.