Senior Information Technology Security Analyst

Salary: $94,757.52 - $146,886.48 Annually
Location : City Hall, Fort Lauderdale, FL 33301, FL
Job Type: Full Time
Job Number: FP036-03
Department: Information Technology Services
Opening Date: 10/12/2026
Closing Date: 11/18/2026 11:59 PM Eastern

POSITION SUMMARY
The person in this role designs, implements, and supports a complete Information Security program, consisting of hardware, software, policies and procedures, which ensures the confidentiality, integrity and availability of all information systems in the City of Fort Lauderdale network. This program encompasses many departments such as, Police, Fire, and SCADA networks. Supervises support staff and evaluates operating policies and procedures and makes recommendations to improve security and operating efficiency and productivity.

This job classification is included within the bargaining unit represented by Federation of Public Employees and therefore is subject to the terms and conditions of the Collective Bargaining Agreement between the City of Fort Lauderdale and Federation of Public Employees.
This is a Management Category II position which includes eight(8) additional Management Vacation Days and a Vehicle Allowance of $340/month.
ESSENTIAL JOB FUNCTIONS

Essential functions are the basic job duties that an employee must be able to perform, with or without reasonable accommodation. The list of essential functions, as outlined herein, is intended to be representative of the tasks performed within this classification. The omission of a function does not preclude management from assigning essential duties not listed herein if such duties relate to the position.

• Designs, implements and supports secure information security architecture for the City of Fort Lauderdale.
• Provides cybersecurity governance, risk, compliance, and audit assessments in support of CJIS, PCI-DSS, HIPAA, NIST, and other applicable requirements.
• Develops, reviews, and maintains cybersecurity policies, procedures, and standards to meet regulatory requirements and improve security and operational effectiveness.
• Serves as a technical lead for cybersecurity initiatives by coordinating project activities and providing cybersecurity subject matter expertise.
• Leads project implementation with large groups of people from varying departments.
• Evaluates the cybersecurity impact of proposed projects and initiatives on the City's technology environment.
• Researches emerging threats, vulnerabilities, and attack techniques and evaluates their potential impact on the City's technology environment.
• Supports cybersecurity awareness initiatives and provides security guidance and education to City employees and stakeholders.
• Reviews proposed technologies, including cloud and Artificial Intelligence solutions, to ensure appropriate cybersecurity controls, privacy safeguards, and risk mitigation measures are incorporated.
• Conducts cybersecurity risk assessments of systems, applications, cloud services, and third-party vendors, and leads the City's vendor cybersecurity risk management program.
• Coordinates vulnerability management activities, including risk prioritization, remediation tracking, and exception management.
• Documents security concerns and communicates significant cybersecurity risks and incidents to appropriate leadership in a timely manner.
• Assists in the testing, selection, placement, implementation, documentation, operation, and maintenance of various information security technologies.
• Maintains logs and writes reports regarding information security activities.
• Plans, coordinates, manages, or performs internal and external security assessments, audits, and evidence-gathering exercises.
• Provides technical guidance, mentorship, and cybersecurity subject matter expertise to less experienced Security team members and serves as an escalation point for complex security issues.
• Leads cybersecurity incident response activities, coordinates remediation efforts, and provides post-incident recommendations to reduce organizational risk.
• Keeps apprised of latest developments and updates in information security technology.
• Performs related work as required.

JOB REQUIREMENTS, PREFERENCES & WORK ENVIRONMENT

MINIMUM JOB REQUIREMENTS:

1. Bachelor's Degree in Information Technology, Computer Science, Management Information Systems or a related field.
2. Five (5) to Seven (7) years of experience in the design, implementation, and support of enterprise-wide IT security programs (hardware, software, policies and procedures) including writing and auditing of policy, procedures and standards, and at least one (1) year of supervisory experience. Additional qualifying experience or completion of coursework at an accredited college or university in a job-related field, may substitute on a year-for-year basis for the required experience or education.
3. To claim Veterans' Preference, candidates must attach to the application a copy of military separation papers (DD214) and service-connected disability documentation (if applicable) to meet eligibility requirements as stipulated by Florida Statues. For additional information, please refer to the

Preferences:

1. Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), Certified Cloud Security Professional (CCSP), or other relevant cybersecurity certifications.

2. Experience with cybersecurity architecture and engineering; vulnerability management; incident response; vendor risk management; cloud security; Microsoft 365 and Entra ID security; email security; endpoint detection and response (EDR/XDR); security information and event management (SIEM) platforms; intrusion detection and prevention systems (IDS/IPS); Active Directory security; disaster recovery (DR) and business continuity planning (BCP); Operational Technology (OT) and SCADA security; and cybersecurity compliance frameworks including CJIS, PCI-DSS, HIPAA, and NIST.
HOW TO APPLY & SUPPLEMENTAL INFORMATION
The City of Fort Lauderdale receives a high volume of applications, so not every applicant who meets the minimum qualifications will be guaranteed an interview. Candidates are selected for interviews based on how closely their education and work experience match the specific requirements of the position.

Applicants will be subject to an extensive selection and screening process, which may include, but not be limited to evaluation of training and experience; written; oral and performance-based testing; skills assessment; interview; employment check, background investigation; medical examination; and drug screen. For Public Safety positions, the process additionally includes polygraph examinations and psychological evaluations. The expected duration of the selection process varies by position.

All applicants, including current City of Fort Lauderdale employees, need to fully detail their work experience on the employment application. Applicants must ensure that all required documents submitted are in a format that is acceptable, clear, and legible. It is the applicant's responsibility to update their online profile with accurate personal information, work history, education, and certifications each time they submit a new application. Incomplete applications may result in disqualification.

For technical support with your application, contact from 9 am to 9 pm EST, Monday to Friday, at (855) 524-5627 or email .
01

What is the highest level of education you have received from an accredited college or university in Information Technology, Computer Science, Management Information Systems or a related field.

• Bachelor's Degree
• Master's Degree
• Certification in related field
• Education in unrelated field
• None of the above

02

How many years of experience (not including school or lab work) do you possess in the design, implementation, and support of enterprise-wide IT security programs (hardware, software, policies and procedures) including writing and auditing of policy, procedures and standards? Experience must be demonstrated on your application.

• No experience
• Less than 1 year
• 1-2 years
• 3-4 years
• 5-6 years
• 7-8 years
• 9 or more years

03

How many years of experience leading cybersecurity projects, coordinating technical teams, or providing technical guidance to other IT professionals do you possess?

• No experience
• 1-2 years
• 3-4 years
• 5 or more years

04

Describe your experience leading cybersecurity projects, coordinating technical staff, mentoring less experienced employees, or serving as a technical lead. Include your employer(s), the types of projects you led, and your role.
05

Briefly describe which SIEM platforms you have worked with and your experience using them
06

Briefly describe which firewall technologies and other network security technologies (IDS/IPS, VPN, web filtering, etc.) you have worked with and in what capacity.
07

Briefly describe the information security policies, standards, and procedures you have developed or maintained. Include your employer(s) and length of the project(s).
08

Briefly describe your experience performing cybersecurity risk assessments of systems, cloud services, or third-party vendors. Include your employer(s) and the types of assessments performed.
09

This position will require an in-depth employment background check including a limited scope polygraph to be conducted by the Police Department as part of the post offer onboarding process as this position is deemed security sensitive. Are you willing and able to meet this requirement?

• Yes
• No

10

Briefly summarize your years of experience in the design, implementation, and support of enterprise-wide IT security programs (hardware, software, policies and procedures) including writing and auditing of policy, procedures and standards which qualifies you for this position.
11

My level of experience with Industrial control systems (ICS) and/or supervisory control and data acquisition (SCADA), distributed control systems (DCS) is 1 - for no experience. 2 - for some experience (e.g. taken courses, but no work-related experience). 3 - for experience (e.g. hands-on work-related experience). 4 - for professional proficiency (e.g. able to perform all aspects of planning, design, configuration, implementation and support with very little assistance).

• 1
• 2
• 3
• 4

12

My level of experience with IT Security compliances and regulations is 1 - for no experience. 2 - for some experience (e.g. taken courses, but no work-related experience). 3 - for experience (e.g. hands-on work-related experience). 4 - for professional proficiency (e.g. able to perform all aspects of planning, design, configuration, implementation and support with very little assistance).

• 1
• 2
• 3
• 4

13

My level of experience with SIEM devices is 1 - for no experience. 2 - for some experience (e.g. taken courses, but no work-related experience). 3 - for experience (e.g. hands-on work-related experience). 4 - for professional proficiency (e.g. able to perform all aspects of planning, design, configuration, implementation and support with very little assistance).

• 1
• 2
• 3
• 4

14

My level of experience with Firewalls is: 1 - for no experience. 2 - for some experience (e.g. taken courses, but no work related experience). 3 - for experience (e.g. hands-on work related experience). 4 - for professional proficiency (e.g. able to perform all aspects of planning, design, configuration, implementation and support with very little assistance).

• 1
• 2
• 3
• 4

15

My level of experience with Information Security Policy creation is: 1 - for no experience. 2 - for some experience (e.g. taken courses, but no work related experience). 3 - for experience (e.g. hands-on work related experience). 4 - for professional proficiency (e.g. able to perform all aspects of planning, design, configuration, implementation and support with very little assistance).

• 1
• 2
• 3
• 4

16

My level of experience with creation of Information Security training materials is 1 - for no experience. 2 - for some experience (e.g. taken courses, but no work related experience). 3 - for experience (e.g. hands-on work related experience). 4 - for professional proficiency (e.g. able to perform all aspects of planning, design, configuration, implementation and support with very little assistance).

• 1
• 2
• 3
• 4

Required Question