CITY OF GARDEN GROVE
CYBERSECURITY OFFICER
CLASS CODE: 110 RANGE: M204
DEFINITION
Under general direction, plans and coordina tes the implementation of technologies, operations, testing and investigation of info rmation security for the City; serves as technical expert in advising City managem ent in information security policies, protocols, and disaster recovery and business continuity; ensures maintenance and functionality of the City’s networks.
ESSENTIAL DUTIES
Develops and implements the City’s overall information security strategy Plans, coordinates, and manages the selection and implementation of security- based hardware and software solutions
Develops and conducts security interpretation and training, including security education and exercises to create awar eness, prevent attacks, and increase effectiveness of cybersecurity response
Assists in the development of the information systems disaster recovery and business continuity plans and procedures
Advises City Management and intern al and external stakeholders on information security issues and practices to ensure optimal levels of protection for City’s information assets and operating processes
Manages and executes special technology projects, such as technology upgrades
Develops, documents, maintains, and implements information security policies, procedures, and standards
Monitors network traffic and system re ports, logs, and alerts; and resolves potential security compromises
Coordinates and reports on investigations of cybersecurity incidents Performs regularly scheduled monitoring of changes in local, State, and Federal regulations and accreditation standard s related to security; coordinates activities with corresponding agencies to ensure security compliance measures Monitors trends and developments in information security and business continuity planning technologies
Manages the operation and maintenance of the City’s wide area network (WAN) and local area networks (LAN)
Selects, trains, evaluates, and supervises assigned staff, including staff development and training activities; makes recommendations regarding staffing decisions and disciplinary actions
Performs related duties as assigned
MINIMUM QUALIFICATIONS
Experience
Four years of experience in computer security analysis and network administration in an enterprise environment. Supervisory experience is highly desirable.
Education
Bachelor's degree from an accredited college or university with major coursework in information systems, information technology, computer science or other closely related field.
Knowledge of
Principles and methods of systems analysis, software, and network and database administration; principles, practices, methods, tools and frameworks, standards, and techniques of information security, including systems security products and methodologies, applicable to both the enterprise and infrastructure and its applications and data management systems and to public access computer systems; principles, practices, methods and techniqu es of business conti nuity planning and continuity management; principles and practices of project management; applicable local, State, and Federal laws, regulations, and codes; capabilities and limitations of information processing equipment; supervisory techniques and management principles and their application; and customer service techniques and principles.
Ability to
Evaluate and reason logically and clearly with abstract data to identify problems and make sound recommendations; learn and apply knowledge and expertise of information security to City processes and assets; manage and support complex projects on-time and within budget; communica te clearly and concisely, both orally and in writing; keep up-to-date, interpret, and ensure compliance with applicable local, State, and Federal laws, codes, an d regulations; stay current on trends, innovations, and updates in the industry; work cooperatively with team members, City staff, general public, and other govern ment agency representatives; effectively supervise, evaluate, mentor, and discipline staff; and commit to providing quality customer service.
Other Requirements
Possession of at least one of the following security certifications is required at time of hire: Certified Information Systems Secu rity Professional (C ISSP) or Certified Information Security Manager (CISM). A California Class “C” driver’s license is highly desirable.
PHYSICAL DEMANDS
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Incumbents in this classification sit, speak clearly, hear normal voice conversation, distinguish shades/color vision, see small details, use a telephone, and work on a personal computer.
WORK ENVIRONMENT
The work environment described here is representative of those an employee encounters while performing the essential functi ons of this job. Incumbents in this classification primarily work in an offi ce environment and may be required to work overtime and weekends.
JOB FAMILY
Information Technology Technician, Info rmation Technology Programmer, Senior Information Technology Analyst, Cybersecurity Officer, Information Technology Manager, Information Technology Director
PROPOSED: 6/11/24