Duties Description Under the direction of senior team members within the Chief Information Security Office (CISO)/Cybersecurity Governance & Compliance (CGC)/Governance & Compliance (GC) Section, the incumbent will be responsible for development and implementation of the Chief Information Security Office's Exception Management Program. The Program primarily supports the management of exceptions submitted based on the statewide information security policies, standards, and guidelines to protect New York State information assets. Additional activities of the Governance & Compliance section include reviewing policy, assessing requests for security information during Internal and External Audits, and working with ITS and with other State entities to ensure compliance with all State and Federal standards. The candidate will also work to promote cybersecurity awareness and information security "best practices".
The position requires communicating orally and in writing with various individuals including management, users, vendors, and other IT staff. The position will be part of the CISO Incident Response program and may require availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.
Specific duties include, but are not limited to:
• Contribute and understand current and future statewide information security policies, standards, processes, and procedures.
• Lead the Exception Management team in aggressively managing the periodic review of information security policies exceptions.
• Act as the Policy SME within CISO supporting other bureaus and sections within the division to understand and implement NYS exception processes.
• Consult with State Entities regarding interpretation and implementation of statewide information security policies, procedures, and best practices.
• Manage the security exception review process for NYS Policy and Standard compliance
• Alongside other CISO staff, provide subject matter expertise for internal and external information security audits across the enterprise. This requires working in conjunction with multiple teams across ITS and State Entities.
• Continuously identify opportunities to streamline and improve the CISO policy review process, tools, and documentation. Develop and update procedural documentation related to exception management.
• Assist during internal and external audits by providing accurate and comprehensive documentation related to information security policies and standards and policy exceptions.
• Perform the full range of supervisory responsibilities.
• Perform additional duties as required.
Minimum Qualifications This is an internal promotion opportunity.
Information Technology Specialist 4 (Information Security)
Non-competitive: Six years of information technology, cyber security, or information assurance experience**
Or
One year of state service as an Information Technology Specialist 3 (Information Security)
**Substitutions:
A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor's substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor's degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master's degree or higher in computer science or related field substitutes for one year of required experience.
Additional Comments ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non-immigrant aliens for temporary work authorization visas or for permanent residence.
Some positions may require fingerprinting.
Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.
If eligible, positions located in New York City will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.
to permanent non-competitive and the official probationary period will begin.
Benefits of Working for NYS Generous benefits package, worth 65% of salary, including:
Holiday & Paid Time Off
• Thirteen (13) paid holidays annually
• Up to Thirteen (13) days of paid vacation leave annually
• Up to Five (5) days of paid personal leave annually
• Up to Thirteen (13) days of paid sick leave annually for PEF.
• Up to three (3) days of professional leave annually to participate in professional development
Health Care Benefits
• Eligible employees and dependents can pick from a variety of affordable health insurance programs
• Family dental and vision benefits at no additional cost
Additional Benefits
• New York State Employees' Retirement System (ERS) Membership
• NYS Deferred Compensation
• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
• Public Service Loan Forgiveness (PSLF)
• And many more.
Some positions may require additional credentials or a background check to verify your identity.
Name ITS Human Resources
Fax 518-402-4924
Email Address PostingResponses@its.ny.gov
Address
Street Empire State Plaza
Swan Street Building, Core 4, Floor 1
City Albany
State NY
Zip Code 12220
Notes on Applying To apply for this position, please submit a cover letter and resume clearly indicating how you qualify. Ensure that you include the vacancy ID in the subject of your email for prompt routing. Your Social Security number may be required to confirm eligibility.
