Chief Information Security Officer

New York City Fire Department; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

The Fire Department, City of New York (FDNY) seeks a full-time Chief Information Security Officer to lead the enterprise security program, shaping strategy and governance to protect data and systems from cyber threats.

The role demands extensive experience in risk management, security architecture, and compliance with frameworks such as NIST, CIS Controls, and HIPAA, with a track record of delivering secure, scalable IT solutions in a large public sector environment.

Qualifications

• A baccalaureate degree in computer science, information systems, engineering, mathematics or related field with six years of full-time experience in enterprise architecture, solutions architecture, network architecture or IT infrastructure systems, or
• A degree with ten years of related experience in those areas, or
• Education/experience equivalent to either of the above.

Responsibilities

• Establish and maintain the organization’s information security strategy, program, and governance.
• Identify, assess, and mitigate information security risks to protect data confidentiality, integrity, and availability.
• Lead security architecture and controls across networks, systems, and cloud environments.
• Oversee security monitoring, threat detection, incident response, and vendor security.
• Ensure compliance with relevant security frameworks (e.g., NIST, CIS, PCI-DSS, HIPAA).

Skills

Cybersecurity strategy

Risk management

Privacy practices

LAN/WAN

Active Directory

PowerShell

Group Policy

Virtualization

Cloud security

IT security technologies

Security monitoring

Vulnerability management

Endpoint security

Data loss prevention

Encryption

Disaster recovery

Vendor management

Security frameworks

Education

Bachelor's degree in Computer Science / Information Systems / Engineering / Mathematics

Tools

CrowdStrike

McAfee

Pulse Secure

Cisco

Firewalls

Windows Server

Rapid7

MS Office 365

Endpoint Security

Enterprise Mobility

Job description

The Fire Department, City of New York (FDNY), seeks a full-time Chief Information Security Officer in the Bureau of Technology Development & Systems. The successful candidate will be responsible for developing and implementing an organization's information security strategy to protect data and systems from cyber threats. Key Responsibilities: Establish Security Strategy: Develop and maintain the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. Risk Management: Identify, assess, and mitigate information security risks to ensure the confidentiality, integrity, and availability of data...

MINIMUM QUALIFICATIONS

1. A baccalaureate degree from an accredited college in computer science, information systems, engineering, mathematics or related field and six years of satisfactory full-time experience related to enterprise architecture, solutions architecture, network architecture and/or IT infrastructure systems; or

2. A baccalaureate degree from an accredited college and ten years of satisfactory full-time experience related to enterprise architecture, solutions architecture, network architecture and/or IT infrastructure systems; or

3. Education and/or experience which is equivalent to "1" or "2" above.

PREFERRED SKILLS

• Minimum of 6 years' experience managing information security programs, developing, and applying information security, risk management, and privacy practices in local, state, or federal government.
• Minimum of 6 years' practical experience designing and implementing IT security solutions deep understanding of various security threats and preventative measures.
• Familiarity with cyber-security frameworks such as NIST, CIS Controls, PCI-DSS, HIPAA etc.
• Strong demonstrated knowledge of LAN/WAN, systems administration, active directory, PowerShell, group policy, virtualization, cloud and IT security technologies.
• Experience with systems access management, change management, security monitoring and intrusion detection, vulnerability management, endpoint security management, cloud security, data loss prevention, encryption, network security, disaster recovery, data management, physical security, vendor management.
• Experience with CrowdStrike, McAfee, Pulse Secure, Cisco, firewalls, Windows Server, Rapid7, MS Office 365, Endpoint Security and Enterprise Mobility in the cloud.
• IT certifications (1 or more) such as Security+, CISSP, CISA, CISM, CySA+, CRISC, C-CISO, SSCP, CASP, CEH, GIAC