Cybersecurity Architect

City of Eugene; Eugene (OR); Hybrid; USD 125,000 - 169,000; Full time

Benefits offered by this job

Hybrid schedule

Bilingual pay up to 5%

Job summary

City of Eugene, Oregon, is hiring a Cybersecurity Architecture, Strategy, and Policy Development leader to design and manage architecture aligned with the NIST Framework and to develop essential security policies for a municipal IT environment.

The role oversees security operations, risk assessments, and incident response, while ensuring compliance with CJIS, HIPAA, PCI, and state mandates. A bilingual pay benefit may apply for eligible employees.

Qualifications

• Bachelor’s degree in information security, computer science, information technology, or closely related field.
• Six years of professional cybersecurity or information security experience, including experience with security standards and government systems.
• Two years in a supervisory or leadership role.
• Certifications such as CISSP, CISM, CEH, Security+; CJIS certification within 90 days.

Responsibilities

• Creates and manages cybersecurity architecture per the NIST Cybersecurity Framework.
• Creates and/or advises on policies relating to cybersecurity standards and activities (e.g., remote access, password policy).
• Tracks emerging threats, vulnerabilities, and technology trends relevant to municipal IT environments.
• Participates in the Information Services Division Architectural Review Board for new or emerging tech changes.
• Scopes, evaluates, implements, configures, and manages security tools to meet City’s cybersecurity needs.
• Researches emerging risks and future technologies with a cybersecurity lens and suggests proactive actions.
• Maintains and enhances the City’s cybersecurity strategy, policies, standards, and procedures.
• Ensures compliance with CJIS, HIPAA, PCI and applicable state mandates.
• Conducts recurring security audits and risk assessments with prioritized recommendations.

Skills

NIST Cybersecurity Framework

Policy development

Leadership

Interagency collaboration

Education

Bachelor's degree in information security, information technology, or related field

Master’s degree in cybersecurity or IT management (preferred)

Tools

Firewalls

SIEM

IDS/IPS

Endpoint protection

Job description

THIS POSITION IS OPEN UNTIL FILLED

The next review of applications will take place: Tuesday, November 17, 2026

PLEASE NOTE – Applications will be reviewed periodically.

Classification: Cybersecurity Architect
Salary Range:$125,174.40 - $169,000.00 Annually
The City of Eugene determines starting pay within the range based on relevant education and experience as provided by the applicant in their application materials. This process is consistent with the Oregon Equal Pay Act (OEPA).
Department/Division: Central Services/Information Services Division
Union Representation: Non-Represented, Exempt
Work Location: 500 E 4th Ave Eugene, OR 97401. Must live within 45 minutes of City of Eugene City Hall.
Work Schedule: Monday - Friday, 8:00 AM - 5:00 PM with flexibility per business need. Hybrid schedule with minimum of two in-office days per week. Potential on-call responsibilities and emergency response duties, occasional evening or weekend work during major incidents or system upgrades.
Benefits: The City of Eugene offers robust and competitive benefits. For more information, select the Benefits Tab, or view benefits summaries as well as see information about all employee benefits.
Bilingual Pay Benefit: This position qualifies for up to an additional 5% of base salary for bilingual pay. Please see “Supplemental Information” at the end of the posting for more information.
Living & Working in Eugene: Information about living in Eugene, how the City of Eugene operates, and more can be found on our website.

Cybersecurity Architecture, Strategy, and Policy Development

• Creates and manages cybersecurity architecture, adhering to the NIST Cybersecurity Framework.
• Creates and/or advises on policies relating to cybersecurity standards and activities (examples: remote access policy, password policy).
• Tracks emerging threats, vulnerabilities, and technology trends relevant to municipal IT environments.
• Participates in the Information Services Division Architectural Review Board for any new or emerging technology changes.
• Scopes, evaluates, implements, configures, and manages security tools to meet the needs of the City’s cybersecurity architecture and enhance the City’s defensive posture.
• Researches and evaluates emerging risks and future technologies such as Frontier AI though a cybersecurity lens and suggests proactive actions to meet challenges created by these innovations.
• Maintains and enhances the City’s cybersecurity strategy, policies, standards, and operational procedures.
• Ensures compliance with regulatory requirements including CJIS, HIPAA, PCI, and applicable state cybersecurity mandates.
• Conducts recurring security audits and risk assessments, producing prioritized recommendations to mitigate identified risks.

Security Operations, Tools Management, and Incident Response

• Supports business continuity and disaster recovery strategies, ensuring integration of cybersecurity requirements.
• Directs daily security operations, including real time monitoring, intrusion detection, Security Information and Event Management (SIEM), security log analysis, and identification of anomalous activity.
• Manages vulnerability scanning, configuration assessments, and remediation coordination with infrastructure and application teams.
• Oversees deployment, tuning, and lifecycle management of security platforms such as firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), SIEM, and endpoint protection solutions.
• Leads the full lifecycle of incident response: triage, containment, eradication, forensic investigation, evidence collection, remediation guidance, and post incident analysis.
• Coordinates cross departmental incident response efforts and integrates findings into policy updates and improved security controls.
• Maintains and updates incident response plans, and tests plans with tabletop exercises or coordinated penetration testing.

Leadership, Collaboration, and Program Management

• Manages security program budget and provide prioritization of tools and staff resources to align with budget.
• Leads the security team including personnel management, skills development, and resource allocations.
• Works closely with IT teams, public safety partners, and external agencies to maintain secure system operations and interagency interoperability.
• Leads cybersecurity awareness initiatives and training programs for City employees.
• Prepares briefings, technical reports, audit responses, budgetary requests, and updates for executive leadership and City Council.
• Actively supports and respects diversity in the workplace.
• Complete designated job tasks, special projects, and all other duties as assigned to meet team, department, and City of Eugene goals while working cooperatively, efficiently, and productively in a team environment.
• Actively demonstrates high levels of employee engagement, accountability, coachability, and responsibility for personal performance and results.

To view detailed information on the duties, knowledge, and abilities that may be expected for this position, please see the classification: Cybersecurity Architect

Minimum Qualifications

Any combination of education and experience that would likely provide the required knowledge, skills, and abilities is qualifying.

Education

• Bachelor’s degree in information security, computer science, information technology, or closely related field.
• Master’s degree in cybersecurity, IT management, or related field is preferred.

Experience

• Six (6) years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems.
• Two (2) years in a supervisory or leadership role.
• Experience working in public-sector or municipal IT environments is preferred.

Licenses and Certifications

• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Security+, or equivalent are preferred.
• Ability to acquire and maintain Criminal Justice Information Services (CJIS) certification within 90 days of hire.

Background

• Must pass a Criminal Justice Information Services (CJIS) background check prior to start date. To pass the background check incumbent must supply fingerprints, personal information, and signed authorization form.

The City of Eugene encourages individuals of all communities and backgrounds to apply for job opportunities as we strive to provide the best service to the public. We are most interested in finding the best candidate for the job, and that candidate may be one who comes with relevant transferable knowledge, skills, and abilities from a variety of sources and experiences. If you are interested in applying, we encourage you to think broadly about your background and skill set for the role.

Bilingual Pay Benefit

This benefit compensates non-represented employees up to 5% of their base salary. To qualify for bilingual pay, the employee must demonstrate fluency in an eligible language and pass a language proficiency test that is administrated by the City’s Employee Resource Center division.

Non-Represented Retirement Program

Upon eligibility, the City will contribute an employee contribution of 6%, as well as the employer contribution, to a retirement program administered by the Oregon Public Employees’ Retirement System (PERS). In addition, the City will pay a 3% contribution to a deferred compensation program if the employee contributes at least 1%.

From January 1, 2020, through December 31, 2034, most retirees may work for a PERS-participating employer for an unlimited number of hours while continuing to receive their pension benefit based on HB 2296. If you have questions about your specific situation, including any restrictions to hours, please refer to the PERS: Work After Retirement.

What to Expect from our Selection Process?

Applicants are screened based upon their relevant knowledge, abilities, skills, experience, and training. The selection process varies according to the position and can include such things as screening of supplemental questionnaires, written or skill tests, ability or fitness tests, interviews, and assessment processes. In addition, background investigations and records checks may be required. Some positions also require applicants to have a psychological evaluation and/or physical examination and a drug test prior to employment. Marijuana use is evaluated consistent with current state law regulations. PLEASE NOTE: Once the posting closes, the process can take 4-6 weeks to complete.

Diversity, Equity, and Inclusion

The City of Eugene is committed to a respectful work environment. We value the cultural, educational, and life experiences of each employee. We believe that a diverse workforce enables us to deliver culturally responsive services to all members of our community. As part of our commitment to diversity, equity, and inclusion we desire to welcome, respect, and create a sense of belonging for a wide range of identities and experiences in our workforce. Women, people with disabilities, and persons of color are strongly encouraged to apply.

The City of Eugene complies with the Americans with Disabilities Act of 1990. Any applicant with a qualified disability under the Americans with Disabilities Act may request accommodation by contacting an employment coordinator at [phone].

In compliance with the Immigration Reform and Control Act of 1986, the City of Eugene will request all eligible candidates who accept employment with the City to provide documentation to prove they are eligible for employment in the United States. NOTE: The City of Eugene does not participate in the E-Verify program; therefore, candidates requiring E-Verify for employment authorization will not be eligible for employment with the City.