Chief Information Security Officer

City of New York; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

The New York City Department of Probation is seeking a Chief Information Security Officer to strengthen cybersecurity and physical security across the agency. You will lead enterprise security initiatives, manage firewall, SIEM, and surveillance integration, and guide incident response and compliance programs.

The ideal candidate has hands-on experience with Palo Alto, Genetec, Tenable/Qualys, IAM, and cloud platforms, plus strong communication to diverse stakeholders.

Qualifications

• A bachelor’s degree and four years of full-time experience related to IT security or policy requirements; or equivalent.
• Strong hands-on experience designing, implementing, and maintaining enterprise security architectures.

Responsibilities

• Monitor network traffic and logs using SIEM to identify anomalies.
• Conduct vulnerability scans and penetration tests with Tenable and Qualys.
• Respond to security alerts, contain threats, and support investigations.
• Configure and maintain firewalls, IDS/IPS, endpoint protection, and port security.
• Lead Genetec Security Center deployment for CCTV and physical security integration.
• Develop and enforce an IT security framework, policies, and incident response plans.
• Deploy web filtering and site-blocking controls.
• Lead deployment of Palo Alto firewalls and related devices.
• Collaborate with NYC Cyber Command and agency bureaus to improve security posture.
• Evaluate IT and surveillance equipment for security benchmarks.

Skills

Palo Alto firewalls

Genetec Security Center

SIEM platforms

Tenable

Qualys

Python

PowerShell

IAM

Windows Server

Azure

AWS

RBAC

PAM

SecureX

Education

Bachelor's degree

Tools

Palo Alto Panorama

Cisco ASA

Firepower

SecureX

Tenable

Qualys

Genetec Security Center

Job description

The New York City Department of Probation is dedicated to improving public safety by supporting individuals on probation. DOP uses research-based practices to supervise and support people on probation and help prevent further interactions with the justice system. By expanding access to education and gainful employment opportunities, healthcare, family supports, and civic engagement, DOP empowers New Yorkers under their supervision to lead safe and thriving lives.

The Department of Probation (DOP) is seeking a Chief Information Security Officer to join its Information Technology team. This role is critical to strengthening the agency's cybersecurity and physical security posture, addressing current vulnerabilities, and implementing enterprise-grade solutions. The ideal candidate will have hands-on experience with network security technologies (e.g., Palo Alto, Cisco), surveillance systems (e.g., Genetec), and a strong understanding of threat detection, incident response, and compliance.

Responsibilities include, but are not limited to, the following:

• Monitor network traffic and system logs using SIEM platforms and tools such as Palo Alto Panorama and Cisco SecureX to identify suspicious activity and investigate anomalies.
• Conduct vulnerability scans and penetration tests using tools like Tenable and Qualys to identify and remediate risks across infrastructure and endpoints.
• Respond to security alerts and incidents, contain threats, and support forensic investigations using packet capture tools, log analysis, and endpoint telemetry.
• Configure and maintain firewalls (Palo Alto, Cisco ASA), IDS/IPS, endpoint protection, and centralized port security systems to enforce security policies and block malicious activity.
• Lead the implementation of Genetec Security Center for CCTV coverage across agency facilities.
• Develop and enforce a formal IT security framework, including policies, incident response plans, and user awareness training.
• Deploy web filtering and site-blocking controls to prevent access to malicious or inappropriate websites.
• Implement centralized port security to detect and block rogue devices on the network.
• Lead the deployment of four Palo Alto firewalls to enhance protection of internal systems against external threats.
• Collaborate with internal bureaus and external partners, including NYC Cyber Command, to assess risks, share intelligence, and improve overall security posture.
• Evaluate IT and surveillance equipment prior to deployment to ensure compliance with security benchmarks.

IT SECURITY SPECIALIST - 95622

Minimum Qualifications

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or, Education and/or experience which is equivalent to "1" above.

Preferred Skills

Minimum of 5 years of hands-on experience designing, implementing, and maintaining network security architecture including segmentation, access control, and threat mitigation strategies across enterprise environments the ideal candidate will demonstrate proven expertise with Palo Alto firewalls (including Panorama), Cisco networking and security platforms such as ASA, Firepower, and SecureX, as well as Genetec Security Center for surveillance and physical security integration. The role requires advanced proficiency with SIEM platforms, vulnerability management tools such as Tenable and Qualys, and scripting languages including Python and PowerShell for automation and log analysis. Strong experience in Identity and Access Management (IAM), encompassing role-based access control (RBAC), privileged access management (PAM), identity lifecycle processes, and integration with cloud and on-premises authentication systems, is essential. Candidates should also possess solid working knowledge of Windows Server, Active Directory, and cloud environments including Microsoft Azure and Amazon Web Services (AWS). The position demands the ability to perform complex threat analysis, conduct forensic investigations, and troubleshoot multi-layered security incidents in real time, along with excellent communication skills to translate technical findings into actionable insights for diverse stakeholders. Industry-recognized certifications such as CCNA Security, Palo Alto PCNSA, CompTIA Security+, or CISSP/CISM are highly desirable.

Public Service Loan Forgiveness

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education's website at https://studentaid.gov/pslf/.

Residency Requirement

New York City Residency is not required for this position

Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.