Operational Technology Cyber Security Manager (Systems Analyst)

Public Works OT Cyber Security Manager (Systems Analyst) is responsible for the department’s digital defense operations. They will lead the Department to protect infrastructure, manage risk, and ensure compliance with regulatory standards. The position will be highly collaborative, working with all Public Works Divisions and the Office of Information Technology.

NATURE AND VARIETY OF WORK

The employee in this role is crucial for safeguarding county resources and minimizing security breaches. They achieve this by managing and monitoring various security platforms, including those for endpoint security, vulnerability management, email security, vendor risk assessment, and security awareness. Their primary objective is to ensure adequate protection for county assets, data, and employees. The work is primarily sedentary and performed in an office environment. However, the work does involve some walking, standing, bending, stooping, lifting, and bending when installing, moving, and repairing computers or peripherals. The employee may be required to lift equipment weighing fifty pounds or more. Employees may also be required to work nights, weekends, and holidays.

Examples Of Duties And Knowledge, Skills And Abilities

Examples of Duties and Knowledge, Skills and Abilities:

(Note: The duties and responsibilities enumerated in this class specification are for the purpose of determining a common set of minimum qualifications and salary level for all positions in this class. They are not intended to include all of the essential functions of all positions in the class.)

• Monitor incoming event queues for potential security incidents
• Prioritize and triage security events based on severity, potential impact, and risk factors.
• Administer security platforms, including onboarding users, reviewing alerts, taking necessary actions based on identified threats, configuring policies, and troubleshooting issues
• Leverage the vulnerability management platform to identify and assess vulnerabilities across network and infrastructure assets
• Support the broader vulnerability management lifecycle, including prioritization, reporting, and remediation
• Collaborate with IT teams to remediate findings and harden endpoint configurations
• Participate in incident response activities as part of the designated incident response team
• Conduct security awareness training and phishing campaigns
• Assist with the development of security standards, policies, and procedures
• Stay up-to-date on the latest cyber threats, vulnerabilities, and security trends
• Create, manage, and dispatch incident tickets
• Additional tasks include but are not limited to the following areas: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security,
• Identity and Access Management, Security Assessment and Testing, and Security Operations
• Perform related duties as required

Graduation from an accredited four-year college or university with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing, programming, operations and methodologies; and six (6) or more years of experience in electronic data processing systems analysis and design.

Note: Accredited University or College is the recognition from an accrediting agency that an institution maintains a certain level of educational standards. The U.S. Department of Education maintains a database of accrediting agencies it recognizes for schools within the United States. For a University or College outside the United States, the applicant must provide documentation of accreditation and educational equivalency, which can be accomplished through a credential evaluation service. Applicants with a foreign degree must provide this documentation upon the close of the announcement.

Note: 24/7 On-Call Availability Required

Note: Background Check Required

Supplemental Qualifications

• Five (5) or more years of hands-on experience in Cyber Security. Note: Hands-on is work experience, not experience gained through education.
• Two or more years of experience in Vulnerability Management
• Two or more years of experience in Incident Response
• Two or more years of experience in Endpoint Detection and Response
• Specialized training in Cybersecurity, Risk Management, Server Security, Network Security, or Cloud Security.