1 RESOLUTION NO. 24-29,516
A RESOLUTION OF THE COUNCIL OF THE CITY OF
BURBANK APPROVING THE ESTABLISHMENT OF THE
SALARY AND CONFLICT OF INTEREST CODE
DESIGNATION FOR THE CLASSIFICATION OF
INFORMATION TECHNOLOGY SECURITY MANAGER
THE COUNCIL OF THE CITY OF BURBANK RESOLVES:
1. The Position Classification, adopted by Resolution No. 9240 on the 16 th day
of June, 1953, as amended, is further amended by the addition thereto of the classification of Information Technology Security Manager. This classification is added with a title and specification as set forth in Exhibit A, and a biweekly salary as follows:
CTC Barg. Code Job Series Grade Step 1 Step 14 431 M Information Systems M.1301 $5,836.69 $7,675.25
2. After review and consultation by the Management Services Department, City Clerk’s Office and the Office of the City Attorney, it has been determined that the classification of Information Technology Security Manager is a Designated Position as defined in t he City’s Conflict of Interest Code and shall be required to file a form 700 Statement of Economic Interests as required by Government Code § 81000 et seq. and shall be required to report in disclosure categories 1, 3, 5, 6.
3. The Financial Services Director is authorized to make such revisions, changes in summaries, fund totals, grand totals, and other portions of the budget document as necessary to reflect and implement the terms and provisions of this resolution.
PASSED and ADOPTED this 21st day of May, 2024.
_s/Nick Schultz _____________
Nick Schultz
Mayor
Approved as to Form:
Attest: Office of the City Attorney
_s/Kimberley Clark By: _s/Joseph H. McDougall ___ Kimberley Clark, City Clerk Joseph H. McDougall City Attorney
24-29,516
2 STATE OF CALIFORNIA )
COUNTY OF LOS ANGELES ) ss.
CITY OF BURBANK )
I, Kimberley Clark, City Clerk of the City of Burbank, do hereby certify that the foregoing Resolution was duly and regularly passed and adopted by a vote of the Council of the City of Burbank at its regular meeting held on the 21 st day of May, 2024 by the following vote:
AYES: Anthony, Takahashi, Perez, and Schultz.
NOES: None.
ABSENT: Mullins.
_s/Kimberley Clark ________
Kimberley Clark, City Clerk
24-29,516
3 Exhibit A
Resolution for the Classification of Information Technology Security Manager
CITY OF BURBANK
INFORMATION TECHNOLOGY SECURITY MANAGER
DEFINITION
Under general direction, to perform advanced and highly complex duties in strategy development, planning, developing, recommending, overseeing, implementing, and ensuring compliance with comprehensive information security strategies and programs; identify security risks and recommend and oversee the implementation and management of current and future security technologies and mitigation measures; and perform related duties as required.
ESSENTIAL FUNCTIONS
Responsible for leading, developing, and implementing City -wide or large- scale department information security strategies, plans, programs, policies, and procedures designed to protect the integrity and security of the City network, data resources, operations, and other information assets in accordance with City policies and industry standards; leads and consultatively manages development of information security strategies and plans to prevent the unauthorized use, release, modification, loss, or destruction of data and other information assets; implements and administers relevant security solutions; facilitates the involvement of key stakeholders in plan development processes designed to assess the business impacts of various security approaches and develop security plans that balance security needs with business goals; leads and participates with stakeholders and team members in security initiatives, including but not limited to: conducting risk assessments, responding to security audits and compliance reporting, evaluating security management options, and developing policies, procedures and protocols; oversees the enforcement of policies, procedures, and plans related to security; develops security incident response plans and leads security incident response and recovery efforts; assists with the design and implementation of disaster recovery and business continuity plans, procedures, audits, and enhancements; develops and implements comprehensive communications plans and tools; acts as advocate and primary liaison for the City’s security vision; remains informed on trends and issues in the security industry, including current and emerging technologies and costs advises, counsels, and educates leadership on security topics; may supervise, train, or evaluate employees; may make effective recommendations regarding promotion, transfer, and disciplinary action, up to and including termination; drives on city business.
MINIMUM QUALIFICATIONS
Employment Standards:
• Knowledge of – advanced level understanding of business theory, business processes, management, and business operations; advanced level understanding of planning, organizing, and developing Information Technology (IT) security and 24-29,516
4 facility security system technologies; an advanced level understanding of planning and executing security policies and standards; advanced level knowledge of hands-on implementation and administration of relevant security solutions; technology environments, including information security, buildi ng security, and defense solutions; substantial exposure to data processing, hardware platforms, enterprise software applications, and outsourced systems; systems design and development from user stories and acceptance criteria, through analysis, and management; advanced level understanding of project management principles; North American Electric Reliability Corporation Critical Infrastructure Protection (NERC-CIP) compliance standards; Criminal Justice Information System (CJIS) security compliance standar ds; Nationwide Cybersecurity Review (NCSR) assessment framework; National Institute of Standards and Technologies (NIST) framework; principles and practices of sound personnel management and supervision; spelling, grammar, and punctuation.
• Skill in – applying IT in solving security problems; setting and managing priorities; excellent written and oral communications skills, including executive level presentations; excellent interpersonal skills; operating modern computers and related software; exercising independent judgement.
• Ability to – develop conceptual frameworks and apply sound principles for the secure operation of City technology resources; define and develop security strategy and roadmaps; facilitate cross -functional team meetings and build consensus; understand business needs and work collaboratively with business stakeholders and team members; implement and manage the administration of relevant security systems and solutions; recommend and implement changes in security policies and practices in accordance with changing needs; apply the City and IT Department goals and objectives; promote and oversee strategic security relationships between internal resources and external entities, including other government agencies, vendors, and partner organizations; s et priorities and balance responsibilities for multiple initiatives; communicate effectively, both orally and in writing; prepare, maintain, and accurately complete records; establish and maintain effective working relationships with supervisor s, fellow employees, and the public.
Education/Training: Any combination of education and/or experience that has provided the knowledge, skills, and abilities necessary for acceptable job performance as determined by the City. Example combination includes, but is not limited to graduation from an accredited college or university with a bachelor’s degree in computer science, engineering, business management, or a closely related field, five years of experience in information security or closely related work experience, and three years of experience in progressive information security management.
License & Certificates: A valid California Class “C” driver’s license or equivalent at time of appointment; current industry recognized certification (to be determined at the time of recruitment) may be required at the tim e of appointment. All required licenses and certificates must be maintained throughout employment in this classification. 24-29,516
5 SUPPLEMENTAL INFORMATION
Desirable Qualifications: One or more certifications and/or equivalent experience in:
Project Management Professional (PMP); Agile project/program management methodologies; Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified Ethical Hacker (CEH).