Information Security Specialist

City of New York

Remote Eligibility

On-site

Domain

Security Operations

State

New York

City

Corona

Job Description

Posted on:

January 15, 2025

Primary NIST Speciality

Protect and Defend

NIST Sub-speciality

Incident Response

Seniority

Experienced

Salary ($K)

Summary and company overview

Role Summary

The IT Security Specialist role is a key responsibility needed in the ongoing technical, consultative, and administrative efforts to effectively safeguard the agency’s IT infrastructure, networks, and information system data from internal and external intrusion. The DEP's Bureau of Business Information Technology (BIT) seeks to hire one (1) Information Security Specialist.

Company Overview

The New York City Department of Environmental Protection (DEP) protects public health and the environment by supplying clean drinking water, collecting, and treating wastewater, and reducing air, noise, and hazardous materials pollution. DEP is the largest combined municipal water and wastewater utility in the country, with nearly 6,000 employees. We deliver 1.1 billion gallons of high-quality drinking water per day to 8.5 million New York City residents and more than 1 million people in Upstate New York, and we collect and treat an average of 1.3 billion gallons of wastewater per day.

The New York City Department of Environmental Protection’s (DEP) Business Information Technology (BIT) is responsible for providing quality business, technical and IT system support to our users. This commitment is realized through collaboration, strong relationships, and a unified vision with our partners at DEP to provide quality technological solutions to our business needs.

Responsibilities

Serve as team lead in directing the agency’s data, network, and cybersecurity infrastructure. Plan, define, maintain governance and policies, standards, configuration, operating procedures and guidelines regarding security, identity, and access. Plan, initiate and implement new security infrastructure architecture changes.
Review and administer security controls related to detection, analysis, containment, eradication, and recovery from cybersecurity incidents. Identifies probable system exposure, compromise, problems or design flaws and issues to upper management to limit serious performance impact.
Work closely with business managers and the Agency Chief Contracting Officer (ACCO) in evaluating and procuring proposed IT projects for alignment with DEP’s goals and key business strategies and adherence to established industry standards. Assist with the development and review of technical specifications for the procurement of IT security systems and services.
Performs eDiscovery and digital forensics and conduct network security policy orchestration. Define, manage, and monitor security devices, including procedures for detecting, reporting and responding to computer security incidents.
Perform security assessment of applications and infrastructure. Develop and manage security strategy, security awareness programs, security architecture, and security incident response.
Roll out Security Information Event Management (SIEM) and log Management strategies for audit and compliance.

Job Requirements

Required Qualifications:

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or,

Preferred Qualifications:

Education and/or experience which is equivalent to '1' above.

Additional commentary

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.