Information Systems Security Manager

Wallingford, Town of (CT); Wallingford (CT); On-site; USD 110,000 - 150,000; Full time

Job summary

Wallingford Town of (CT) seeks a highly skilled cybersecurity administrator to protect municipal computer systems, networks, cloud services, and physical security systems. You will identify, analyze, and mitigate security risks under the Director of Information Technology, balancing independent and collaborative duties.

Responsibilities include configuring security technologies, administering AD/Entra ID/Microsoft 365, monitoring email security, and supporting incident response and continuity

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or closely related field.
• Five years of progressively responsible cybersecurity or IT security experience.
• Professional certification such as CISSP, CEH, Security+ or GIAC desirable.

Responsibilities

• Configure, deploy, and maintain security technologies (firewalls, IDS/IPS, endpoint protection, encryption).
• Administer and secure Active Directory, Entra ID, Microsoft 365, and related cloud services.
• Monitor and secure email security, investigate phishing, reduce spam/malware threats.
• Manage user accounts, roles, and permissions following least-privilege principles.
• Monitor systems, logs, and alerts for threats and performance issues; respond promptly.
• Assist in incident response planning, investigate security incidents, and document resolutions.

Skills

Network architecture

Cybersecurity tools

Windows Server

Active Directory

Microsoft Entra ID

Microsoft 365

Group Policy

VMware vSphere

Incident response

Vulnerability management

Communication

Documentation

Education

Bachelor's degree in computer science, information technology, cybersecurity, or closely related field

Certifications such as CISSP, CEH, Security+, GIAC

Tools

Firewall

IDS/IPS

SIEM platforms

Endpoint protection

Encryption tools

Vulnerability scanners

Job description

This is a highly technical and administrative position responsible for protecting municipal computer systems, networks, cloud services, virtual infrastructure, physical security systems, and data from cybersecurity threats. This position requires strong technical knowledge and hands-on experience in identifying, analyzing, and mitigating security risks. Working under the general supervision of the Director of Information Technology, this position ensures the town's technology environment remains secure, reliable, and compliant with all applicable standards and regulations. This position works closely with departments across the town and must balance independent responsibilities with collaborative initiatives. The position requires proactive thinking, continuous learning, and adaptability to evolving cybersecurity threats and technologies. Occasional after-hours work may be required to support critical incidents or system maintenance.

Configures, deploys, and maintains security technologies, including firewalls, intrusion detection/prevention systems, endpoint protection platforms, and encryption tools.

Administers and secures Active Directory, Microsoft Entra ID (Azure AD), Microsoft 365, and related cloud services through identity, authentication, and security best practices.

Monitors and manages email security technologies, investigates phishing attempts, and implements measures to reduce spam, malware, and other email-based threats.

Administers user accounts, roles, and permissions to support least-privilege principles and protect sensitive municipal data.

Monitors on a continuous basis systems, logs, and alerts to identify potential threats, performance issues, or suspicious activities and responds promptly as necessary.

Performs regular vulnerability scans, risk assessments, and (when appropriate) penetration testing and recommends and supports remediation activities.

Coordinates and maintains operating system, application, and firmware updates; implements secure configuration standards and verifies timely remediation of identified vulnerabilities.

Assists in developing, maintaining, and executing incident response plans; investigates and documents security incidents to ensure timely resolution and minimal service disruption.

Supports and verifies backup, disaster recovery, and business continuity processes, including periodic testing to ensure the availability and recoverability of critical municipal systems.

Contributes to the creation, review, and implementation of IT security policies and procedures; supports compliance with federal, state, and local cybersecurity and data privacy regulations.

Assists with internal and external security audits and provides documentation supporting regulatory and compliance requirements.

Provides end-user support on security matters, delivers training on safe computing practices, and promotes cybersecurity awareness across town departments.

Assists with the administration, monitoring, maintenance, and security of the town's VMware vSphere virtual infrastructure, including virtual machines, hosts, storage, and backup operations.

Researches, evaluates, and recommends emerging security tools, solutions, and best practices to strengthen the town’s security posture.

Coordinates with technology vendors regarding support, maintenance, licensing, warranties, procurement activities, and project implementation as directed by the Director of Information Technology.

Creates and maintains detailed documentation, including system configurations, security incidents, audit logs, and policy updates.

Maintains and supports electronic access control, security camera infrastructure, and related physical security technologies; coordinates maintenance, upgrades, and vendor support as needed.

Performs other related duties as required.

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:

Considerable knowledge of network architecture, operating systems, and cybersecurity tools such as firewalls, IDS/IPS, SIEM platforms, and endpoint protection systems. Considerable ability to identify, investigate, and remediate cybersecurity vulnerabilities and security incidents across Windows, network, and cloud environments. Good knowledge of VMware vSphere and virtualized server environments, including virtual machine management, host administration, storage, networking, and security best practices. Considerable ability to assess risks, analyze system behavior, and develop effective mitigation strategies. Considerable ability to troubleshoot complex issues both independently and collaboratively. Considerable ability to manage multiple projects, prioritize tasks, and meet deadlines in a dynamic environment. Considerable ability to communicate orally and in writing, including the ability to clearly convey technical information to non-technical staff. Considerable ability to work with Microsoft Windows Server, Active Directory, Microsoft 365, Microsoft Entra ID, Group Policy, and related enterprise technologies. Considerable ability to establish and maintain effective working relationships with superiors, associates, subordinates, officials of other agencies and the public. Considerable documentation skills, including the ability to create and maintain technical documentation, system and network diagrams, process flowcharts, charts, and Microsoft Excel spreadsheets to support operations, reporting, compliance, and knowledge transfer. Good knowledge of public-sector requirements for data protection, including NIST, CJIS, HIPAA, and relevant federal and state cybersecurity regulations.

MINIMUM QUALIFICATIONS:

Bachelor's degree in computer science, information technology, cybersecurity, or a closely related field from an accredited college or university, plus five (5) years of progressively responsible experience in cybersecurity, network security, or related IT support roles, or any equivalent combination of education and relevant experience substituting on a year-for-year basis. Professional certification such as CISSP, CEH, Security+, GIAC, or their equivalent is desirable.

SPECIAL REQUIREMENT:

Must possess and maintain in good standing a valid State of Connecticut Driver's License.

EXAMINATION:

Written - 100% or Oral - 100% or Background Evaluation - 100% or Written - 50%/Oral - 50% or Written - 50%/Background Evaluation - 50% or Oral - 50%/Background Evaluation - 50%