Agency Chief Information Security Officer

Job Description
The CISO is responsible for maintaining an information risk management and cybersecurity program for the New York City Deferred Compensation Plan (the Plan). The CISO will work with all areas of the Plan’s business to develop a "best in class" information security and compliance program to assess appropriate technology platform risks and protect Plan information assets. As such, the CISO acts as an advisor to the Plan’s CIO regarding the Plan’s compliance with the Citywide Information Security Policies.
Responsibilities include strategy, architecture, solutions design, program coordination and execution, awareness, outreach, business management, and reporting on information security program effectiveness. This position requires a seasoned leader with strong business acumen and detailed working knowledge of information security technologies, practices, policies, and their application to a business. CISO should research and offer innovative solutions and improvement of existing procedures.
The CISO is an implementer who possesses the poise and ability to act calmly and competently in high- pressure, high-stress situations. This role is responsible for developing and managing strong strategic relationships within IT. Ensuring projects, initiatives and security platforms meet all required standards.


Duties and Responsibilities include, but are not limited to the following:

IT & CYBER SECURITY RISK MANAGEMENT:
- Continuously identifying, updating and maintaining information regarding potential security vulnerabilities, risk and threats to the enterprise information technology infrastructure, and distributing technology security information to appropriate staff.

- Provide instructions and coordination regarding software configuration standards for servers and desktop systems that are or may be attached to the enterprise network where necessary to ensure information technology security.

- Support corporate risk leadership to review enterprise IT and cyber risks, assess capabilities, prioritize security and risk strategies and communicate risk intelligence in a way that drives business decision- making.

CISO PROGRAM GOVERNANCE & MANAGEMENT:
- Develop policies, procedures, standards and partner with agency employees and consultants to ensure understanding of and adherence to the Citywide Information Security Policies.

- Coordinates work activities, program functions with other NYC agencies, external business partners related to cyber/information security.

- Work with the Plan’s external IT auditors during the annual Cyber Security Assessment.

- Support the development, implementation and monitoring of a comprehensive enterprise information security, compliance and risk management program.

- Oversee security awareness strategy and programs, including annual employee training and ongoing awareness campaigns to ensure all department employees understand and adhere to information technology policies and standards.

- Responsible for ensuring compliance with City of New York, Citywide Information Security Policies

CYBER SECURITY OPERATIONS /ACTIVITIES:

- Track cyber security incidents and vulnerability reports, direct teams for remediation of issues.

- Ensure identity and access management is properly documented in the ticketing system.

- Produce documentation when/where needed.

- Ensure all systems are equipped and updated with necessary cyber protection tools

- Continuously check for security gaps, document findings and take necessary measures to rectify issues discovered.

- Verify patches, software updates are properly done. Missing patches and inconsistencies should be resolved.

- Analyze vulnerability reports and operationalize them by providing specific guidance to IT Support teams for remediation.

- Assess endpoint system health and suggest improvement or remediation steps.

- Monitor various security tools dashboard, scrutinize numbers, identify anomalies and communicate with appropriate internal and external partners.

CERTIFIED IT ADMINISTRATOR (LA - 13652