Director, Cyber Security Engineering

IMPORTANT NOTE: CANDIDATES MUST BE PERMANENT IN THE COMPUTER SYSTEMS MANAGER CIVIL SERVICE TITLE OR ARE REACHABLE ON THE CURRENT OPEN COMPETITIVE EXAM NO.4035.

PLEASE INCLUDE YOUR EMPLOYEE IDENTIFICATION NUMBER (EIN) WHEN APPLYING AND INDICATE IN YOUR COVER LETTER YOUR PERMANENT CIVIL SERVICE TITLE OR INDICATE YOUR LIST NO. FOR EXAM NO. 4035.

NYC Department of Finance (DOF) is responsible for administering the tax revenue laws of the city fairly, efficiently, and transparently to instill public confidence and encourage compliance while providing exceptional customer service.

DOF’s Finance Information Technology (FIT) Division designs, builds, and supports all facets of DOF’s computer systems, including hardware, software, applications, infrastructure, telephone, and data security. FIT delivers and administers tax-related payment programs for the City of New York by providing the information technology solutions needed to achieve its mission of collecting revenue while ensuring an efficient and improved customer experience. FIT is also responsible for the systems and websites which enable citywide payments, land records, property assessment, parking adjudications, customer service, and the Sheriff’s public safety work.

FIT’s Cyber Security Unit is seeking a Director of Cyber Security Engineering. Reporting to the Chief Information Security Officer (CISO), the selected candidate must have strong organizational and team leadership skills to achieve interdepartmental compliance and to ensure that departmental IT security staff adopt and fully integrate appropriate security and privacy practices and must have extensive technical knowledge in cyber-security and information systems. Detailed knowledge of security and privacy technologies and best practices, as well as, knowledge of appropriate security methods and controls, and IT security privacy legislation and related policy issues are required. The ability to develop and maintain effective working relationships with the Agency's executive management, IT technical staff, legal staff, third-party vendors, and related industry experts is required. The selected candidate will represent the Agency's information security interests to State and Federal agencies and regulatory bodies.

Responsibilities will include, but not be limited to the following:

• Manage the Cyber Security Engineering team.
• Develop Cyber Security policies, guidelines, and standards per NIST Cyber Security Framework.
• Provide comprehensive IT security program management under DOF's CISO's guidance.
• Perform complex system security design, development, analysis, and testing of all DOF's internal, hosted facilities and cloud implementation.
• Evaluate network information security and develop appropriate solutions.
• Research new developments in information technology and their relevance to current business needs and security strategies.
• Development of strategies for secure, cloud-based services.
• Project budgeting, quality assessment and control and resource management.
• Implement and advocate for security best practices and security awareness
• Discuss and convey complex information technology security concepts and terminology with both technical and non-technical staff at all levels within and outside the County.

Additional Information: In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

This position may be eligible for remote work up to 2 days per week, pursuant to the Remote Work Pilot Program agreed between the City and the Collective Bargaining Unit representing employees serving in the civil service title.

COMPUTER SYSTEMS MANAGER - 10050

• A master's degree in computer science from an accredited college or university and three (3) years of progressively more responsible, full-time, satisfactory experience in Information Technology (IT) including applications development, systems development, data communications and networking, database administration, data processing, or user services. At least eighteen (18) months of this experience must have been in an administrative, managerial or executive capacity in the areas of applications development, systems development, data communications and networking, database administration, data processing or in the supervision of staff performing these duties; or
• A baccalaureate degree from an accredited college or university and four (4) years of progressively more responsible, full-time, satisfactory experience as described in "1" above; or
• A four-year high school diploma or its educational equivalent, and six (6) years of progressively more responsible, full-time, satisfactory experience as described in "1" above; or
• A satisfactory combination of education and experience equivalent to "1", "2" or "3" above. However, all candidates must have at least a four-year high school diploma or its educational equivalent and must possess at least three (3) years of experience as described in "1" above, including the eighteen (18) months of administrative, managerial, executive or supervisory experience as described in "1" above.

In the absence of a baccalaureate degree, undergraduate credits may be substituted for a maximum of two (2) years of the required experience in IT on the basis of 30 semester credits for six (6) months of the required experience. Graduate credits in computer science may be substituted for a maximum of one (1) year of the required experience in IT on the basis of 30 graduate semester credits in computer science for one (1) year of the required IT experience. However, undergraduate and/or graduate credits may not be substituted for the eighteen (18) months of experience in an administrative, managerial, executive, or supervisory capacity as described in "1" above.