Information Technology Specialist 4 Information Security ref#24

NYS Office of Information Technology Services; City of Albany (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

NYs Office of Information Technology Services in Albany seeks a professional to develop and implement the CISO’s Exception Management Program, aligning with statewide security policies and standards. The role supports audits, policy reviews, and collaboration with ITS and other state entities to ensure compliance while promoting cybersecurity best practices.

Minimum qualifications include six years in IT/cybersecurity or one year as IT Specialist 3, with degree substitutions outlined.

Qualifications

• Six years of information technology, cybersecurity, or information assurance experience.
• Or one year of state service as an Information Technology Specialist 3 (Information Security).
• Degrees with CS credits may substitute for experience per rules described.

Responsibilities

• Develop and implement the Exception Management Program for NYS information security.
• Review policies, assist audits, and ensure compliance with state/federal standards.
• Lead and support policy review processes, documentation, and related tools.

Skills

Information security

Policy interpretation

Audits coordination

Documentation

Supervisory skills

Education

Bachelor's degree with CS credits

Associate degree with CS credits

Job description

Duties Description

Under the direction of senior team members within the Chief Information Security Office (CISO)/Cybersecurity Governance & Compliance (CGC)/Governance & Compliance (GC) Section, the incumbent will be responsible for development and implementation of the Chief Information Security Office’s Exception Management Program. The Program primarily supports the management of exceptions submitted based on the statewide information security policies, standards, and guidelines to protect New York State information assets. Additional activities of the Governance & Compliance section include reviewing policy, assessing requests for security information during Internal and External Audits, and working with ITS and with other State entities to ensure compliance with all State and Federal standards. The candidate will also work to promote cybersecurity awareness and information security “best practices”.

Description

Duties Description

Under the direction of senior team members within the Chief Information Security Office (CISO)/Cybersecurity Governance & Compliance (CGC)/Governance & Compliance (GC) Section, the incumbent will be responsible for development and implementation of the Chief Information Security Office’s Exception Management Program. The Program primarily supports the management of exceptions submitted based on the statewide information security policies, standards, and guidelines to protect New York State information assets. Additional activities of the Governance & Compliance section include reviewing policy, assessing requests for security information during Internal and External Audits, and working with ITS and with other State entities to ensure compliance with all State and Federal standards. The candidate will also work to promote cybersecurity awareness and information security “best practices”.

Specific Duties Include, But Are Not Limited To

• Contribute and understand current and future statewide information security policies, standards, processes, and procedures.
• Lead the Exception Management team in aggressively managing the periodic review of information security policies exceptions.
• Act as the Policy SME within CISO supporting other bureaus and sections within the division to understand and implement NYS exception processes.
• Consult with State Entities regarding interpretation and implementation of statewide information security policies, procedures, and best practices.
• Manage the security exception review process for NYS Policy and Standard compliance
• Alongside other CISO staff, provide subject matter expertise for internal and external information security audits across the enterprise. This requires working in conjunction with multiple teams across ITS and State Entities.
• Continuously identify opportunities to streamline and improve the CISO policy review process, tools, and documentation. Develop and update procedural documentation related to exception management.
• Assist during internal and external audits by providing accurate and comprehensive documentation related to information security policies and standards and policy exceptions.
• Perform the full range of supervisory responsibilities.
• Perform additional duties as required.

Qualifications

Minimum Qualifications

This is an internal promotion opportunity.

Information Technology Specialist 4 (Information Security)

Non-competitive: Six years of information technology, cyber security, or information assurance experience**

Or

One year of state service as an Information Technology Specialist 3 (Information Security)

• Substitutions:

A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor’s substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor’s degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master’s degree or higher in computer science or related field substitutes for one year of required experience.

Additional Comments

ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non-immigrant aliens for temporary work authorization visas or for permanent residence.

Some positions may require fingerprinting.

Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.

If eligible, positions located in New York City will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.

to permanent non-competitive and the official probationary period will begin.

Benefits of Working for NYS

Generous benefits package, worth 65% of salary, including:

Holiday & Paid Time Off

• Thirteen (13) paid holidays annually
• Up to Thirteen (13) days of paid vacation leave annually
• Up to Five (5) days of paid personal leave annually
• Up to Thirteen (13) days of paid sick leave annually for PEF.
• Up to three (3) days of professional leave annually to participate in professional development

Health Care Benefits

• Eligible employees and dependents can pick from a variety of affordable health insurance programs
• Family dental and vision benefits at no additional cost

Additional Benefits

• New York State Employees’ Retirement System (ERS) Membership
• NYS Deferred Compensation
• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
• Public Service Loan Forgiveness (PSLF)
• And many more.

The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.