ASSISTANT DEPUTY COMMISSIONER, DATA SECURITY OPERATIONS

NYC Department of Social Services; New York (NY); On-site; USD 90,000 - 150,000; Full time

Job summary

This innovative agency is seeking a Computer Systems Manager to enhance its cybersecurity operations. You will lead the Security Operations Center, implementing strategic goals set by the Chief Information Security Officer. Your role will involve developing best practices, overseeing incident management, and ensuring compliance with security standards. The position offers a unique opportunity to make a significant impact on the agency's risk posture and data security management framework, ensuring the protection of vital information resources. If you are passionate about cybersecurity and ready to take on a leadership role, this is the perfect opportunity for you.

Qualifications

• Master's degree in computer science and 3 years of IT experience required.
• Experience in a managerial role in IT is essential.

Responsibilities

• Develop and implement cybersecurity best practices for daily operations.
• Monitor security incidents and coordinate responses with stakeholders.

Skills

Cybersecurity

Data Security Management

Risk Management

Incident Management

Network Monitoring

Vulnerability Scanning

Education

Master's Degree in Computer Science

Bachelor's Degree

High School Diploma

Job description

APPLICANTS MUST BE PERMANENT IN THE COMPUTER SYSTEMS MANAGER CIVIL SERVICE TITLE.

The Department of Social Services Accountability Office (DSS-AO) is responsible for supporting the integrity of social services programs administered by the New York City Human Resources Administration (HRA), Department of Social Services (DSS) and Department of Homeless Services (DHS).

DSS-AO maintains the operation of the Office of Audit Services (OAS) and Office of Quality Assurance (OQA), Office of Accountability Strategies (OAS), Compliance and Contract Monitoring (CCM), Investigation, Revenue and Enforcement Administration (IREA), Office of Data Security Management (ODSM) and the Accountability Initiative and Change Monitoring (AICM).

The Office of Data Security Management (ODSM) is responsible for implementing the Agency's cybersecurity program. ODSM is tasked with continuously improving the Agency's risk posture by ensuring that appropriate security controls are in place to protect the confidentiality, integrity and availability of Agency information resources.

The Office of Data Security Management is recruiting for (1) Computer Systems Manager M IV to function as an Assistant Deputy Commissioner, Data Security Operations, who will:

1. Develop and implement best practices to support efficiencies and effective daily operations in an ongoing effort to meet the Agency’s cybersecurity needs. Oversee the day-to-day operations for the Security Operations Center and Emergency Operations and Incident Management units. Collaborate to ensure appropriate cross-utilization of the various units across ODSM.
2. Implement the strategic goals determined by the Chief Information Security Officer (CISO), including: the strategic enterprise cybersecurity and risk management plan and a long-term roadmap to arrive at the desired future state. Ensure implementation of security controls requirements, policies, and standards as outlined in the strategic plan.
3. Monitor implementation priorities, and specific initiatives necessary to achieve the future state. Ensure the CISO is updated periodically, communicate changes in priorities to the relevant stakeholders, monitor workstreams that support and implement agreed upon strategic goals. Develop and recommend corrective action plans, where needed.
4. Through the direction of the CISO, the ADC implements the appropriate data security management framework for the Agency. Implement established controls into daily operations to monitor compliance. Recommend IT solutions to the CISO to minimize the risk of cyber-attacks and insider vulnerabilities. Support/assist the CISO in the development of operations-level policies and proactively identify/remediate potential weaknesses. Conduct vulnerability scans, monitor and analyze network logs and flows, aggressively monitor the Identity and Access Management (IAM) program, and data and usage discovery for investigations of employees. Present findings to the CISO, the Chief Accountability Officer, the DSS First Deputy Commissioner, and the Commissioner.
5. Oversee the day-to-day operations related to Security Operations Center, which monitors the Agency's network, perimeter, endpoints and applications. Oversee the investigation of reported security breaches. Develop strategies to effectively and appropriately handle security incidents and trigger investigations. Coordinate major incident response among internal and external stakeholders, oversee postmortem analyses, and ensures findings are communicated and addressed appropriately.
6. At the direction of the CISO, implement an Agency-wide information security awareness program. Facilitate the implementation of methods to educate Agency personnel, such as behavioral and learning tests and nudge theory.
7. Review and analyze reports outcome and use findings to report on the effectiveness of current program and the state of personnel preparedness. Makes recommendations to the CISO and implements corrective action plans as necessary. Ensures that the program meets all relevant city, state and federal mandates, and that it leverages best industry practices. Periodically reports findings monthly to agency executives, including the Commissioner.

Hours/Shift: Monday to Friday: 9 am - 5pm

Location:

Minimum Qualifications

1. A master's degree in computer science from an accredited college or university and three (3) years of progressively more responsible, full-time, satisfactory experience in Information Technology (IT) including applications development, systems development, data communications and networking, database administration, data processing, or user services. At least eighteen (18) months of this experience must have been in an administrative, managerial or executive capacity in the areas of applications development, systems development, data communications and networking, database administration, data processing or in the supervision of staff performing these duties; or

2. A baccalaureate degree from an accredited college or university and four (4) years of progressively more responsible, full-time, satisfactory experience as described in "1" above; or

3. A four-year high school diploma or its educational equivalent, and six (6) years of progressively more responsible, full-time, satisfactory experience as described in "1" above; or

4. A satisfactory combination of education and experience equivalent to "1", "2" or "3" above. However, all candidates must have at least a four-year high school diploma or