Vulnerability Management Lead – InfoSec

NYS Office of Information Technology Services; New York (NY); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Holiday & Paid Time Off

Health Care Benefits

ERS Retirement System

Deferred Compensation

Job summary

NYS Office of Information Technology Services in New York state seeks an Information Technology Specialist 3 (Information Security), Vulnerability Management Analyst, to supervise a team responsible for identifying, prioritizing, and remediating vulnerabilities across ITS client agencies and other state entities.

As a team lead, you will oversee vulnerability scans and remediation efforts, develop standard operating procedures, and act as a subject matter expert to resolve findings.

Qualifications

• Five years of information technology, cyber security, or information assurance experience.
• Bachelor’s degree with 15 semester credit hours in CS or related field substitutes for part of the experience.
• Master’s degree or higher substitutes for one year of experience.

Responsibilities

• Lead the Vulnerability Management team and oversee vulnerability scans and remediation.
• Develop and maintain standard operating procedures for team activities.
• Serve as SME for resolving vulnerability findings and coordinate remediation efforts across groups.
• Monitor information security trends, tools, and techniques to improve the program.
• Perform supervisory duties and act on additional responsibilities as assigned.

Skills

Vulnerability management

Team leadership

Information security

Communication

Education

Bachelor's degree with CS credits

Associate degree with CS credits (substitute)

Job description

NYS Office of Information Technology Services in New York state seeks an Information Technology Specialist 3 (Information Security), Vulnerability Management Analyst, to supervise a team responsible for identifying, prioritizing, and remediating vulnerabilities across ITS client agencies and other state entities.

As a team lead, you will oversee vulnerability scans and remediation efforts, develop standard operating procedures, and act as a subject matter expert to resolve findings.