Review Vacancy
Date Posted: 02/04/20
Applications Due: 02/25/20
Vacancy ID: 78618
Position Information
NY HELPNo
AgencyInformation Technology Services, Office of
TitleInformation Technology Specialist 2 (Information Security) Ref #18601R
Occupational CategoryI.T. Engineering, Sciences
Salary Grade18
Bargaining UnitPS&T - Professional, Scientific, and Technical (PEF)
Salary RangeFrom $56604 to $71980 Annually
Employment Type Full-Time
Appointment Type Permanent
Jurisdictional Class Non-competitive Class
Travel Percentage 0%
Schedule
Workweek Mon-Fri
Hours Per Week 37.50
Workday
From 9 AM
To 5 PM
Flextime allowed? No
Mandatory overtime? No
Compressed workweek allowed? No
Telecommuting allowed? No
Location
County Albany
Street Address W. Averell Harriman State Office Campus, Building 5, 4th Floor
City Albany
StateNY
Zip Code12207
Job Specifics
Minimum Qualifications Bachelor’s degree* in a cyber security, information assurance, or information technology related field, OR bachelor's degree with 15 credit hours in cyber security, information assurance, or informational technology.
* Appropriate information security or information assurance experience may substitute for the bachelor’s degree on a year-for-year basis; an associate’s degree requires an additional two years of information technology, information security, or information assurance experience.
Preferred Qualifications:
• Bachelor’s Degree with a concentration or major in Information Security, Cyber Security, Digital Forensics, Information Assurance, or a related field
• Applicable Information Security certificate(s), including but not limited to:
o Certificate in Information Security Fundamentals (e.g., Security+, GSEC, CISF, GISF)
• Working knowledge of:
o computer networks, intrusion detection systems, routers, firewalls, operating systems, network vulnerability assessments, web application vulnerability assessments, computer programming and scripting
o government security and privacy mandates/regulatory compliance (e.g., HIPAA, PCI, IRS Pub 1075, CJIS)
o Information Security (CIA triad, Information Classification, Risk Management, Incident Response, Vulnerability Management, Security Architecture & Engineering)
o Information Security Frameworks (NIST Cyber Security Framework, CIS Controls, ISO 2700 series)
• 1+ years’ experience in technical writing
• Coursework or experience in the following areas:
o applying and implementing network and/or system security
o information security incident response
o security policy/standard/guideline implementation
o conducting risk assessments and evaluating information technology systems for security controls (Secure Systems Development Lifecycle)
o compliance assessments, audit support/response, and compliance/audit remediation
• Excellent oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding
• Demonstrated critical thinking, problem solving and analytical skills
Duties Description Under the direction of a Lead Information Security Analyst, Information Technology Specialist 3, SG-23, within the Chief Information Security Office, Integrated Security Services, Security Services Team, the position will be a member of a Security Services Team that provides security services to one or more ITS Portfolios and their client agencies. The incumbent will provide in-depth information security consulting and services aligned with business needs of the client agencies to ensure confidentiality, integrity, and availability of information and systems.
The position requires communicating orally and in writing with various individuals including management, users, vendors, and other IT staff. The incumbent will have to work with ITS teams and upper-level agency management to resolve technically complex and politically sensitive issues under pressure.
The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.
Specific duties include, but are not limited to:
• Serves as information security expert, and evaluates systems and contracts for alignment with agency and State information security policies:
o Acts as information security liaison to agency and portfolio staff, maintaining close relationships to ensure security services align with business needs;
o Provides information security expertise to information security staff, ITS, and ITS-served agencies on a broad range of information security standards and best practices;
o Acts as Information Security Lead on ITS Projects and Initiatives to ensure security by design through implementation of the Secure Systems Development Lifecycle (SSDLC);
o Reviews the current and proposed architectures to meet security requirements for portfolio-served agencies;
o Assists staff with technical and security issues as necessary;
o Develops and maintains familiarity with client agency business functions and requirements;
o Develops and maintains expertise in cyber security compliance domains including, but not limited to, FISMA, NIST SP 800-53 and other 800 series guidelines, IRS Pub 1075, PCI DSS, HIPAA, HITECH;
o Develops and maintains expertise in cyber security frameworks including, but not limited to, CIS Top 20 CSC, NCSF, and ISO/IEC 27000 series.
• Supports the management and resolution of security threats to agency information systems:
o Assists with implementing information security incident response plans, and reports;
o Assists with response to potential security incidents;
o Escalates security concerns and report incidents to the applicable entities for review and action.
• Implements information security and compliance programs:
o Participates in the development, interpretation, review and communication of NYS information security policies, procedures and standards;
o Assists with analyzing the impact of proposed policy and legislation as they pertain to information systems and makes recommendations as appropriate;
o Supports the implementation of information security procedures and protocols and participates in security risk reviews and remediation activity including producing written reports;
o Writes progress reports to management and users outlining what was done, what needs to be done and timeframes for accomplishing tasks.
• Monitors and stays aware of information security industry trends, tools and techniques:
o Represents the agency at internal and external information security meetings and conferences to maintain awareness, and evaluates the applicability of the latest information security techniques and tools to the agency’s security program;
o Collaborates with peers to develop a multilayered and adaptive approach to counter a dynamic information security threat environment;
o Researches relevant laws and regulations in consultation with agency counsel that could affect the security controls and classification of information assets and approves adjustments to meet legal and regulatory requirements.
• In addition:
o Maintains an adequate level of current knowledge and proficiency in information security through annual Continuing Professional Education (CPE) credits directly related to information security;
o Performs additional duties as required.
Additional Comments Approval to fill this position is pending with Division of the Budget (DOB). Background check and fingerprinting are required.
Some positions may require additional credentials or a background check to verify your identity.
Contact Information
Name Louise Nails
Telephone 518-473-0398
Fax 518-402-4924
Email Address HR.recruitment@its.ny.gov
Address
Street Empire State Plaza, Swan Street Building, Core 4
PO Box 2062
City Albany
State NY
Zip Code 12220
Notes on ApplyingTo apply, please submit a resume and cover letter indicating that you are applying for the Information Technology Specialist 2 (Information Security) Ref: #18601R. Please clearly indicate how you meet the minimum qualifications for this position. Your Social Security number may be required to confirm your eligibility.
FAQs • Workers with Disabilities (55b/c) • Civil Service Exams
State Agencies: Department of Civil Service • Office of the State Comptroller
OER Link: Employee Unions and Bargaining Units
Exam announcements • General Information about NYS Government
© 2024 NYS Department of Civil Service
StateJobsNY ℠ 2024 NYS Department of Civil Service
Accuracy • Privacy • Accessibility • Contact