Deputy Chief Information Security Officer
Job Description
In support of the CIO, the Chief Information Security Officer (CISO), and the OIT Executive Management Team, the Deputy Chief Information Security Officer (DCISO) assists providing leadership and guidance in critical areas of technology security administration for city networks, programs and general infrastructure, including budgeting, resource development and allocation, policy formation, technology evaluation, and service development, delivery, and deployment. The DCISO provides day-to-day assistance to the CISO managing business operations to improve cost effectiveness, service quality, and IT security and operational effectiveness. The DCISO also provides leadership, direction, and support within the City and liaising with external IT security partner agencies. The DCISO will analyze technology trends and advancement in areas of IT security and helps plan for the long-term direction of the IT organization’s security hardening for City systems. The DCISO shall act on behalf of the CISO as assigned, and, in the absence of the CISO, as a principal security officer advising on IT security-related decisions to inform executive decisions.
Essential Functions • Assists the CISO advising the CIO and executive management team on cybersecurity issues, policies and practices. • Assists the CISO directing and approving security system designs. • Supports the CISO overseeing a team of security personnel and vendors working together to safeguard the City’s assets, intellectual property, and information systems. • Assists the CISO coordinating the hiring, training, evaluation and mentoring of security personnel and the development of education/training programs to ensure appropriate awareness of security policies, procedures, and standards. • Assists the CISO identifying protection goals, objectives and metrics consistent with the OIT’s strategic plan. • Engages with the CISO in directing the development and implementation of security policies, standards, guidelines and procedures to ensure ongoing maintenance of security. • Maintains relationships with other localities, state and federal law enforcement and other related government agencies. • Oversees Incident response planning as well as the investigation of security breaches and assists with disciplinary and legal matters associated with such breaches as necessary. • Schedules periodic security audits and works with outside consultants as appropriate for independent security audits. • Ensures that disaster recovery and business continuity plans comply with OIT’s security goals and objectives. • Reviews, plans with the CISO and helps schedule security upgrades and maintenance of software. • Working with the CISO, provides strategic leadership and guidance at the executive level in critical areas of technology administration having institution, state-wide and/or national impact. • Oversees cross-institutional initiatives and executive level projects, fostering strategic partnerships in carrying out enterprise-wide computing services for the central IT organization. • Assists the CIO and CISO in leading overall information technology strategic planning to achieve business goals by prioritizing information technology initiatives and coordinating the evaluation, deployment, and management of current and future technology projects. • Assists the CIO and CISO in governance oversight, project and portfolio management, and service delivery management. • Engages with CISO to provide leadership for planning, developing, and implementing information technology initiatives. • Performs miscellaneous job-related duties as assigned.
Competencies, Knowledge, Skills and Abilities • Must be an articulate and persuasive leader who can communicate security-related concepts to a broad range of technical and non-technical staff. • Should have experience with planning, auditing, and risk management, as well as contract and vendor negotiation. • Strong interpersonal and communication skills and the ability to work effectively with a wide range of constituencies in a diverse community. • Skill in organizing resources and establishing priorities. • Strategic planning and advanced leadership skills. • Ability to develop requests for and evaluate proposals in reference to leading-edge information services technology. • Ability to provide strategic guidance and counsel to clientele in the assessment and development of existing and/or proposed systems. • Ability to foster a cooperative work environment.
Qualifications
• Completion of a bachelor’s degree program at an accredited college or university, which has included major course work in computer science, information science, system analysis, software engineering, or a closely related field. • Minimum of eight years of work experience, which must include at least three years of direct IT security-related experience, including exposure to NIST framework and HIPAA. • Experience managing a team of professionals and demonstrated project management skills. • Valid Certified Information Systems Security Professional (CISSP) credential, such as CISSP-ISSAP, CISSP-ISSEP or CISSP-ISSMP, is preferred but not required.
Additional Information
Salary Range: $130,000 - $140,000
Please provide a resume and include a cover letter
Did you know? ● We are a Public Service Loan Forgiveness Program qualified employer ● 25% tuition discount program for City employees (and sometimes spouses and dependents as well) in partnership with area colleges and universities ● We offer Comprehensive health coverage for employees and their eligible dependents ● Our wellness program offers eligibility into the discounted medical plan ● Employees receive paid vacation, sick leave, and holidays ● Generous retirement savings options are available
*The successful candidate must be a city of Philadelphia resident within six months of hire
Please note that effective September 1, 2021, the City of Philadelphia is requiring all new employees to present proof of vaccination against COVID-19.
The City of Philadelphia is an Equal Opportunity employer and does not permit discrimination based on race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, source of income, familial status, genetic information or domestic or sexual violence victim status. If you believe you were discriminated against, call the Philadelphia Commission on Human Relations at 215-686-4670 or send an email to faqpchr @phila.gov. For more information, go to: Human Relations Website: http://www.phila.gov/humanrelations/Pages/default.aspx