DEPUTY CHIEF INFORMATION SECURITY OFFICER

New York City Fire Department; New York (NY); Presencial; USD 150.000 - 210.000; Jornada completa

Descripción de la vacante

The Fire Department of the City of New York (FDNY) is seeking a Deputy Chief Information Security Officer to lead the Bureau of Enterprise Technology's cybersecurity program. The role focuses on securing FDNY systems, networks, and data, and aligning with agency policies and standards.

The Deputy CISO will report to the CISO and oversee security operations, risk management, incident response, and disaster recovery while guiding technology resiliency and compliance across the department.

Formación

• Minimum six years leading information security programs.
• Strong knowledge of cybersecurity frameworks (NIST, CIS Controls, PCI-DSS, HIPAA).
• Experience with LAN/WAN, Active Directory, PowerShell, Group Policy, Windows Server, virtualization, cloud technologies, and security tools.

Responsabilidades

• Oversee security operations, vulnerability management, and incident response.
• Coordinate disaster recovery, business continuity, and technology resiliency efforts.
• Provide security oversight for networks, systems, cloud environments, and applications.
• Ensure compliance with City policies and industry standards.

Conocimientos

Cybersecurity leadership

Security operations

Incident response

Threat detection

Communication

Educación

Bachelor's degree

Herramientas

CrowdStrike

McAfee

Pulse Secure

Cisco

Rapid7

Microsoft security solutions

Descripción del empleo

NOTE: This position is open only to City of New York employees serving in the permanent civil service title of Certified IT Administrator (LAN/WAN).

The Fire Department of the City of New York (FDNY) seeks a full-time Deputy Chief Information Security Officer (Deputy CISO) to serve within the Bureau of Enterprise Technology (BET). Reporting to the CISO, the Deputy CISO will assist in leading FDNY's cybersecurity program and protecting the Department's systems, networks, infrastructure, applications, and data. The successful candidate will support the development and implementation of cybersecurity strategies, policies, standards, and controls; identify and mitigate information security risks; and help ensure the confidentiality, integrity, and availability of critical technology resources. Responsibilities include overseeing security operations, vulnerability management, access management, endpoint and cloud security, security monitoring, and incident response.The Deputy CISO will coordinate the investigation, containment, remediation, and recovery of cybersecurity incidents and support disaster recovery, business continuity, and technology resiliency efforts. The position will provide security oversight for networks, systems, cloud environments, applications, and technology projects and ensure compliance with applicable City policies, cybersecurity requirements, and industry standards.

MINIMUM QUALIFICATIONS

1. A baccalaureate degree from an accredited college, and two years of satisfactory full-time (not classroom based) experience in local area network and/or wide area network planning, design, configuration, installation, implementation, troubleshooting, integration, performance monitoring, maintenance, enhancement, and security management; or

2. A four-year high school diploma or its educational equivalent and six years of satisfactory full-time (not classroom based) information technology experience of which at least 2 years must have been as described in "1" or

3. A satisfactory equivalent of education and/or experience equivalent to "1" or "2" above. Education may be substituted for experience on the basis that 30 undergraduate semester credits from an accredited college is equivalent to 6 months of experience. A master’s degree in computer science or a related field from an accredited college may be substitute for one year of experience. However, all candidates must have at least one year of satisfactory (not classroom based) full-time information technology experience as described in "1" above.

Note: In addition to meeting the minimum Qualification Requirements: Incumbents may be required to update existing and/or obtain additional professional industry-standard certification(s) for current and future technical environments(s) in which they may be assigned to work, as determined by the employing agency.

PREFERRED SKILLS

Minimum of six (6) years of experience managing information security programs and implementing cybersecurity, risk management, and privacy practices within local, state, or federal government. Minimum of six (6) years of hands-on experience designing and implementing IT security solutions. Strong knowledge of cybersecurity threats, vulnerabilities, risk mitigation, and frameworks including NIST, CIS Controls, PCI-DSS, and HIPAA. Strong technical knowledge of LAN/WAN, Active Directory, PowerShell, Group Policy, Windows Server, virtualization, cloud technologies, Microsoft 365, firewalls, and enterprise security technologies. Experience with identity and access management, vulnerability management, security monitoring, endpoint and cloud security, DLP, encryption, network security, disaster recovery, and vendor risk management. Experience with security technologies such as CrowdStrike, McAfee, Pulse Secure, Cisco, Rapid7, and Microsoft security solutions. Strong leadership, analytical, communication, incident response, and problem-solving skills. One or more relevant certifications, such as Security+, CISSP, CISA, CISM, CySA+, CRISC, C-CISO, SSCP, CASP+, CEH, or GIAC.