IT Security & Risk Manager: Policy, Incident Response

DGS Office of External Affairs; New York (NY); On-site; USD 120,000 - 170,000; Full time

Job summary

New York State Department of Financial Services seeks a Manager of Information Technology Services 2 (Information Security) to direct and manage information security and compliance programs, lead teams in developing and maintaining security architecture, and serve as a security expert advising agency executives.

The role involves incident response, vulnerability management, policy development, staff management, and ensuring alignment with state and federal security standards in either Albany or

Qualifications

• Bachelor's degree in Information Security, Computer Science, MIS, or related field required.
• 7+ years of experience in risk management, information security, and IT with preferred leadership experience.
• Knowledge of information security management frameworks such as NIST 800-53 and CIS Controls.
• Excellent written and verbal communication skills with ability to communicate security concepts to technical and non-technical audiences.
• Experience developing information security policies and procedures and executing security programs.
• Familiarity with DFS Cybersecurity Regulation (23 NYCRR Part 500).

Responsibilities

• Direct and manage information security and compliance programs.
• Lead teams in developing and maintaining security architecture.
• Advise agency executives on security strategy and risk.
• Oversee incident response, vulnerability management, and policy development to ensure alignment with state and federal standards.

Skills

Risk management

Information security

Leadership

Policy development

Education

Bachelor's degree in Information Security or related field

Tools

NIST 800-53

CIS Controls

Job description

New York State Department of Financial Services seeks a Manager of Information Technology Services 2 (Information Security) to direct and manage information security and compliance programs, lead teams in developing and maintaining security architecture, and serve as a security expert advising agency executives.

The role involves incident response, vulnerability management, policy development, staff management, and ensuring alignment with state and federal security standards in either Albany or