Information Security Policy & Compliance Lead

Information Technology Services, Office of; City of Albany (NY); Vor Ort; USD 95.000 - 120.000; Vollzeit

Zusammenfassung

Information Technology Services, Office of, in Latham, NY, seeks an Information Technology Specialist 4 (Information Security) to lead the CISO's exception management program and strengthen agency cybersecurity compliance across New York State.

The role emphasizes policy review, audit support, and the promotion of information security best practices, with potential after-hours availability for incident response as needed.

Qualifikationen

• Six years of information technology, cyber security, or information assurance experience, or one year of state service as an Information Technology Specialist 3.
• Bachelor's degree with 15 semester credit hours in computer science or related field (substitutes for three years of experience)
• Master's degree or higher in computer science or related field
• Experience with information security policies, standards, and compliance frameworks
• Strong written and oral communication skills for working with management, users, vendors, and IT staff

Aufgaben

• Develop and implement the Chief Information Security Office's Exception Management Program.
• Manage security policy exceptions and supporting cybersecurity compliance across New York State agencies.
• Policy review, internal and external audit support, and promotion of information security best practices.
• Potential after-hours availability for incident response.

Kenntnisse

Information security policies

Compliance frameworks

Written and verbal communication

Auditing

Ausbildung

Bachelor's degree with 15 CS credits

Master's degree or higher in CS

Jobbeschreibung

Information Technology Services, Office of, in Latham, NY, seeks an Information Technology Specialist 4 (Information Security) to lead the CISO's exception management program and strengthen agency cybersecurity compliance across New York State.

The role emphasizes policy review, audit support, and the promotion of information security best practices, with potential after-hours availability for incident response as needed.