IT Security Operations Administrator

Company Description

The Office of Innovation & Technology (OIT) is the central IT agency for the City of Philadelphia headed by the Chief Information Officer (CIO). OIT oversees all major information and communications technology initiatives for the City of Philadelphia - increasing the effectiveness of the information technology infrastructure, where the services provided are advanced, optimized, and responsive to the needs of the City of Philadelphia's businesses, residents, and visitors. OIT responsibilities include: identifying the most effective approach for implementing new information technology directions throughout city government; improving the value of the city's technology assets and the return on the city's technology investments; ensuring data security continuity; planning for continuing operations in the event of disruption of information technology or communications services; and supporting accountable, efficient and effective government across every city department, board, commission and agency.

The Philadelphia Department of Public Health's mission is to protect and promote the health of all Philadelphians and to provide a safety net for the most vulnerable. We provide services, set policies, and enforce laws that support the dignity of every man, woman, and child in Philadelphia. We work together to make Philadelphia a healthy place to live, work and play.

Job Description

The IT Security Operations Administrator's role is to ensure the secure operation of the DPH computer systems, servers, and network connections. This includes collaboration with OIT to check server and firewall logs, scrutinize network traffic, establishing, and updating virus scans, and troubleshooting. This person will also analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion and conduct user activity audits where required.

The IT Security Operations Administrator acts as a senior member of the DPH Health IT team to respond to IT security issues related to IT operations; perform documented information security processes; identify, create, and document needed processes and process improvements related to IT security operations; and research information security topics, tools, techniques, and threats. They lead operational security projects, serve as an information security resource on general DPH IT projects, develop responses to OIT Security audit and security findings.

Essential Functions

Security Operations Management

• Follow documented information security policies, processes, and procedures.
• Document new information security processes and update existing information security.
• Coordinate deployment, management, and maintenance of all security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and antivirus software with the Office of Innovation and Technology (OIT).
• Administer and maintain end user accounts, permissions, and access rights.
• Manage connection security for local area networks and DPH web sites.
• Manage and ensure the security of databases and data transferred both internally and externally.
• Review results of penetration tests and collaborate with application owners to mitigate or eliminate identified risks and vulnerabilities.
• Identify and implement necessary improvements to prevent incidents from recurring and proposing appropriate solutions and/or next steps.
• Prioritize information security issues, work on multiple tickets concurrently, monitor existing tickets, and manage resolution.
• Research information security topics, tools, techniques, and threats as directed.
• Serve as an information security resource on DPH IT projects.
• Participate in RFP/contract development and review for tools and services specifically related it DPH Security Operations.
• Actively promote a customer-oriented approach to maintain a secure DPH network.
• Know how to find answers. Understand available tools and resources to determine correct answers to security issues.

Relationship Management

• Build and maintain collaborative and consultative relationships with OIT, DPH Divisions/Units as well as vendors related to DPH operational security systems and processes being managed and or supported by DPH Health IT and OIT Operations Security Teams.
• Gain an understanding of OIT and DPH processes and requirements as they relate to the DPH supported systems.
• Conduct regular reviews, priority-setting, and planning sessions with the Health IT Director, the Health IT Infrastructure Manager, the Health IT Enterprise Data Services Manager, and other stakeholders. Serve as an advocate for those priorities, plans, and other technology needs within DPH Health IT.
• Monitor, evaluate, and regularly report to Health Director on IT security related IT projects, services, and support; the delivery of services according to service level agreements; and levels of client satisfaction.

Competencies, Knowledge, Skills, and Abilities

• Extensive experience with information, network, and application security concepts, methodologies, and processes
• Deep understanding of information risk assessment and mitigation concepts, methodologies, and tools.
• Comprehensive understanding of forensics and compliance concepts, methodologies, processes, and tools.
• Ability to organize work effectively, conceptualize and prioritize objectives and exercise independent judgment based on an understanding of organizational policies and activities.
• Strong written and oral communication and interpersonal skills with a focus on rapport-building, listening and questioning skills.
• Proven analytical and problem-solving abilities, including ability to anticipate, identify, and solve critical problems.
• Ability to build effective relationships and strong commitment to working collegially and collaboratively with constituents at all levels in a diverse and distributed environment.

Qualifications

We care more about what you can do than where you learned how to do it. That said, a bachelor's degree, any GIAC certification, CISSP certification, and four years of experience in IT security is preferred; and a good foundation for the work. Additional job-related experience around the competencies above in lieu of a bachelor's degree will be considered.

Additional Information

Salary Range: $90,000-$100,000

Salary cannot exceed $100,000

All applications must include a cover letter. Applications without a cover letter will be considered incomplete.

Did you know?
• We are a Public Service Loan Forgiveness Program qualified employer : 25% tuition discount program for City employees (and sometimes spouses and dependents as well) in partnership with area colleges and universities
• We offer Comprehensive health coverage for employees and their eligible dependents
• Our wellness program offers eligibility into the discounted medical plan
• Employees receive paid vacation, sick leave, and holidays
• Generous retirement savings options are available

*The successful candidate must be a city of Philadelphia resident within six months of hire
Effective May 22, 2023, vaccinations are no longer required for new employees that work in non-medical, non-emergency or patient facing positions with the City of Philadelphia. As a result, only employees in positions providing services that are patient-facing medical care (ex: Nurses, doctors, emergency medical personnel), must be fully vaccinated.

The City of Philadelphia is an Equal Opportunity employer and does not permit discrimination based on race,
ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, source of income, familial status, genetic information or domestic or sexual violence victim status. If you believe you were discriminated against, call the Philadelphia Commission on Human Relations at 215-686-4670 or send an email to faqpchr @phila.gov. For more information, go to: Human Relations Website:
http://www.phila.gov/humanrelations/Pages/default.aspx