Senior Information Technology Security Analyst

Cybersecurity Jobs; Fort Lauderdale (FL); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Vacation

Holiday

Sick leave

Medical insurance

Dental insurance

Vision insurance

Life insurance

Short-term disability insurance

FRS retirement

Job summary

The City of Fort Lauderdale is seeking a senior Enterprise Information Security professional to design, implement, and support its enterprise information security program. This role provides technical leadership across governance, risk, compliance, audits, and incident response within a large multi-department environment.

Responsibilities include security architecture, policy development, risk assessments, vendor risk management, and overseeing vulnerability management and incident response.

Qualifications

• Bachelor’s Degree in IT, CS, MIS or related field.
• 5–7 years designing and managing enterprise IT security programs incl. policy development.
• At least 1 year of supervisory experience.
• Veterans’ Preference requires documentation (DD214) where applicable.

Responsibilities

• Designs, implements, and supports enterprise security architecture for the City of Fort Lauderdale.
• Leads governance, risk, compliance, and audit activities.
• Provides mentorship and escalation support to security staff.
• Assesses cybersecurity risks for systems, applications, cloud services, and vendors.
• Coordinates vulnerability management and incident response efforts.
• Reviews new technologies for security controls and privacy safeguards.

Skills

Security governance

Leadership

Policy writing

Incident response

Risk management

Education

Bachelor's Degree in Information Technology, Computer Science, MIS

Tools

Microsoft 365

Entra ID

SIEM

EDR/XDR

Active Directory

OT/SCADA security

Job description

Responsible for designing, implementing, and supporting the City’s enterprise information security program, with technical leadership across governance, risk, compliance, audits, and incident response.

Responsibilities

• Designs, implements, and supports secure information security architecture for the City of Fort Lauderdale.
• Delivers cybersecurity governance, risk, compliance, and audit assessments aligned to CJIS, PCI-DSS, HIPAA, NIST, and other applicable requirements.
• Develops, reviews, and maintains cybersecurity policies, procedures, and standards to meet regulatory needs and improve security operations.
• Acts as a technical lead and escalation point for cybersecurity initiatives and complex issues.
• Coordinates project activities and provides subject matter expertise to support implementation across large, multi-department groups.
• Evaluates cybersecurity impact of proposed projects and initiatives across the City’s technology environment.
• Researches emerging threats, vulnerabilities, and attack techniques and assesses potential impact to City systems.
• Supports cybersecurity awareness initiatives, providing security guidance and education to employees and stakeholders.
• Reviews proposed technologies, including cloud and Artificial Intelligence solutions, to ensure cybersecurity controls, privacy safeguards, and risk mitigations are incorporated.
• Performs cybersecurity risk assessments for systems, applications, cloud services, and third-party vendors; leads vendor cybersecurity risk management activities.
• Coordinates vulnerability management, including risk prioritization, remediation tracking, and exception management.
• Documents security concerns and communicates significant cybersecurity risks and incidents to appropriate leadership on a timely basis.
• Supports the testing, selection, placement, implementation, documentation, operation, and maintenance of information security technologies.
• Maintains security logs and produces reports related to information security activities.
• Plans, coordinates, manages, or performs internal and external security assessments, audits, and evidence-gathering exercises.
• Provides technical guidance, mentorship, and subject matter expertise to less experienced Security team members; serves as an escalation point for complex security issues.
• Leads cybersecurity incident response activities, coordinates remediation efforts, and provides post-incident recommendations to reduce organizational risk.
• Keeps current on developments and updates in information security technology.
• Performs related work as required.

Requirements

• Bachelor’s Degree in Information Technology, Computer Science, Management Information Systems, or a related field.
• Five (5) to Seven (7) years of experience designing, implementing, and supporting enterprise-wide IT security programs (hardware, software, policies and procedures), including writing and auditing policy, procedures, and standards.
• At least one (1) year of supervisory experience.
• To claim Veterans’ Preference, attach to the application a copy of military separation papers (DD214) and service-connected disability documentation (if applicable), as required by Florida Statutes.

Technologies

• CJIS
• PCI-DSS
• HIPAA
• NIST
• CISSP
• CISM
• GIAC
• CCSP
• Microsoft 365
• Entra ID
• EDR/XDR
• SIEM
• IDS/IPS
• Active Directory
• OT
• SCADA

Benefits

• Vacation
• Holiday
• Sick leave
• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Short-term disability insurance
• Federal Retirement System (FRS) with an investment option and a pension option (3% employee contribution; new employees automatically enrolled)

Preferences

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), Certified Cloud Security Professional (CCSP), or other relevant cybersecurity certifications.
• Experience with cybersecurity architecture and engineering; vulnerability management; incident response; vendor risk management; cloud security; Microsoft 365 and Entra ID security; email security; endpoint detection and response (EDR/XDR); security information and event management (SIEM) platforms; intrusion detection and prevention systems (IDS/IPS); Active Directory security; disaster recovery (DR) and business continuity planning (BCP); Operational Technology (OT) and SCADA security; and cyb