Information Systems Security Manager

This is a highly technical and administrative position responsible for protecting municipal computer systems, networks, cloud services, virtual infrastructure, physical security systems, and data from cybersecurity threats. This position requires strong technical knowledge and hands-on experience in identifying, analyzing, and mitigating security risks. Working under the general supervision of the Director of Information Technology, this position ensures the towns technology environment remains secure, reliable, and compliant with all applicable standards and regulations. This position works closely with departments across the town and must balance independent responsibilities with collaborative initiatives. The position requires proactive thinking, continuous learning, and adaptability to evolving cybersecurity threats and technologies. Occasional after-hours work may be required to support critical incidents or system maintenance.

Examples Of Duties

Configures, deploys, and maintains security technologies, including firewalls, intrusion detection/prevention systems, endpoint protection platforms, and encryption tools.

Administers and secures Active Directory, Microsoft Entra ID (Azure AD), Microsoft 365, and related cloud services through identity, authentication, and security best practices.

Monitors and manages email security technologies, investigates phishing attempts, and implements measures to reduce spam, malware, and other email-based threats.

Administers user accounts, roles, and permissions to support least-privilege principles and protect sensitive municipal data.

Monitors on a continuous basis systems, logs, and alerts to identify potential threats, performance issues, or suspicious activities and responds promptly as necessary.

Performs regular vulnerability scans, risk assessments, and (when appropriate) penetration testing and recommends and supports remediation activities.

Coordinates and maintains operating system, application, and firmware updates; implements secure configuration standards and verifies timely remediation of identified vulnerabilities.

Assists in developing, maintaining, and executing incident response plans; investigates and documents security incidents to ensure timely resolution and minimal service disruption.

Supports and verifies backup, disaster recovery, and business continuity processes, including periodic testing to ensure the availability and recoverability of critical municipal systems.

Contributes to the creation, review, and implementation of IT security policies and procedures; supports compliance with federal, state, and local cybersecurity and data privacy regulations.

Assists with internal and external security audits and provides documentation supporting regulatory and compliance requirements.

Provides end-user support on security matters, delivers training on safe computing practices, and promotes cybersecurity awareness across town departments.

Assists with the administration, monitoring, maintenance, and security of the town's VMware vSphere virtual infrastructure, including virtual machines, hosts, storage, and backup operations.

Researches, evaluates, and recommends emerging security tools, solutions, and best practices to strengthen the towns security posture.

Coordinates with technology vendors regarding support, maintenance, licensing, warranties, procurement activities, and project implementation as directed by the Director of Information Technology.

Creates and maintains detailed documentation, including system configurations, security incidents, audit logs, and policy updates.

Maintains and supports electronic access control, security camera infrastructure, and related physical security technologies; coordinates maintenance, upgrades, and vendor support as needed.