NYS Office of Information Technology Services
Information Technology Specialist 3 Information Security
NYS Office of Information Technology Services, New York, New York, us, 10261
Pay Range
Base pay range: $86,681.00/yr - $109,650.00/yr
Location adjustment pay: upstate NYC +$3,400, Mid-Hudson +$1,650.
Description ITS provides operational support to state agencies 24x7x365. Some positions may require critical service at any time. Under the support of a Manager Information Technology Services 1 or 2 (Information Security), the Information Technology Specialist 3 (Information Security), SG-23 will support the day‑to‑day operations of an information security unit for a dedicated agency to support the confidentiality, integrity, and availability of the agency’s information assets. The position requires availability during off‑shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.
Responsibilities
Assist with the implementation of information security and compliance programs.
Evaluate and resolve security threats to agency information systems.
Serve as an information security provider for the Dedicated Support Team and provide recommendations on system and contract alignment with agency and State information security policies.
As needed, participate in meetings and communicate agency needs and expectations with agency stakeholders, Chief Technology Office (CTO) representatives, and team members.
Maintain familiarity with each client agency’s business functions and requirements.
Assist each agency in complying with NYS information security policies and standards, protocols, cybersecurity bestpractices, and regulatory requirements related to cybersecurity.
Assist each agency in evaluating, understanding, and appropriately managing information security risks.
Respond to incidents that pose a security risk.
Assist with advising agency on security considerations related to procurement of products and services.
Support each agency in maintaining information classification for IT systems and solutions and data sets in alignment with NYS policy.
Ensure security engineering and architecture considerations are addressed in services and systems designs.
Pursuant to approved protocols and processes, disseminate threat information to support ITS teams and agencies.
Respond to security incidents, including investigating attacks and breaches.
Analyze threats and compliance requirements, advise management, and develop plans for risk mitigation and compliance. Pursuant to approved protocols and processes, elevate security concerns and report incidents to the applicable entities for review and action in an appropriate manner.
Promote and contribute to the development of information security awareness and programs to benefit the agencies.
Contribute to the development of NYS policies and standards.
Maintain an adequate level of current knowledge and proficiency in information security through annual Continuing Professional Education (CPE) credits directly related to information security.
Assist with project security for ITS and supported agency projects and initiatives.
Monitor and remain aware of information security industry trends, tools, and techniques.
Perform additional duties as required.
Qualifications Minimum qualifications: Information Technology Specialist 3 (Information Security). Non‑competitive: five years of information technology, cybersecurity, or information assurance experience.
Substitutions: A bachelor’s or higher‑level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor’s substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor’s degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master’s degree or higher in computer science or related field substitutes for one year of required experience.
Preferred Qualifications
Applicable Information Security certificate(s) such as CISSP, CISM, etc.
Experience in one or more of the following areas:
applying network, system, or application security
security policy/standard/guideline development, implementation, or interpretation
conducting risk assessments and evaluating information technology systems for security controls (SSDLC)
information security incident response
Excellent oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding
Demonstrated critical thinking, problem solving and analytical skills
Demonstrated skill in facilitating meetings, listening, and negotiating between multiple stakeholders to drive results
Additional Comments ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non‑immigrant aliens for temporary work authorization visas or for permanent residence. Some positions may require fingerprinting. Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.
Benefits Benefits of Working for NYS: generous benefits package worth 65% of salary, including:
Holiday & Paid Time Off
Thirteen (13) paid holidays annually
Up to Thirteen (13) days of paid vacation leave annually
Up to Five (5) days of paid personal leave annually
Up to Thirteen (13) days of paid sick leave annually for PEF
Up to three (3) days of professional leave annually to participate in professional development
Health Care Benefits
Eligible employees and dependents can pick from a variety of affordable health insurance programs
Family dental and vision benefits at no additional cost
Additional Benefits
New York State Employees’ Retirement System (ERS) Membership
NYS Deferred Compensation
Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
Public Service Loan Forgiveness (PSLF)
And many more.
Equal Opportunity Employer The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.
Job Details Seniority level: Mid‑Senior level
Employment type: Full‑time
Job function: Science, Information Technology, and Engineering Industries: IT Services and IT Consulting
#J-18808-Ljbffr
Location adjustment pay: upstate NYC +$3,400, Mid-Hudson +$1,650.
Description ITS provides operational support to state agencies 24x7x365. Some positions may require critical service at any time. Under the support of a Manager Information Technology Services 1 or 2 (Information Security), the Information Technology Specialist 3 (Information Security), SG-23 will support the day‑to‑day operations of an information security unit for a dedicated agency to support the confidentiality, integrity, and availability of the agency’s information assets. The position requires availability during off‑shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.
Responsibilities
Assist with the implementation of information security and compliance programs.
Evaluate and resolve security threats to agency information systems.
Serve as an information security provider for the Dedicated Support Team and provide recommendations on system and contract alignment with agency and State information security policies.
As needed, participate in meetings and communicate agency needs and expectations with agency stakeholders, Chief Technology Office (CTO) representatives, and team members.
Maintain familiarity with each client agency’s business functions and requirements.
Assist each agency in complying with NYS information security policies and standards, protocols, cybersecurity bestpractices, and regulatory requirements related to cybersecurity.
Assist each agency in evaluating, understanding, and appropriately managing information security risks.
Respond to incidents that pose a security risk.
Assist with advising agency on security considerations related to procurement of products and services.
Support each agency in maintaining information classification for IT systems and solutions and data sets in alignment with NYS policy.
Ensure security engineering and architecture considerations are addressed in services and systems designs.
Pursuant to approved protocols and processes, disseminate threat information to support ITS teams and agencies.
Respond to security incidents, including investigating attacks and breaches.
Analyze threats and compliance requirements, advise management, and develop plans for risk mitigation and compliance. Pursuant to approved protocols and processes, elevate security concerns and report incidents to the applicable entities for review and action in an appropriate manner.
Promote and contribute to the development of information security awareness and programs to benefit the agencies.
Contribute to the development of NYS policies and standards.
Maintain an adequate level of current knowledge and proficiency in information security through annual Continuing Professional Education (CPE) credits directly related to information security.
Assist with project security for ITS and supported agency projects and initiatives.
Monitor and remain aware of information security industry trends, tools, and techniques.
Perform additional duties as required.
Qualifications Minimum qualifications: Information Technology Specialist 3 (Information Security). Non‑competitive: five years of information technology, cybersecurity, or information assurance experience.
Substitutions: A bachelor’s or higher‑level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor’s substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor’s degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master’s degree or higher in computer science or related field substitutes for one year of required experience.
Preferred Qualifications
Applicable Information Security certificate(s) such as CISSP, CISM, etc.
Experience in one or more of the following areas:
applying network, system, or application security
security policy/standard/guideline development, implementation, or interpretation
conducting risk assessments and evaluating information technology systems for security controls (SSDLC)
information security incident response
Excellent oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding
Demonstrated critical thinking, problem solving and analytical skills
Demonstrated skill in facilitating meetings, listening, and negotiating between multiple stakeholders to drive results
Additional Comments ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non‑immigrant aliens for temporary work authorization visas or for permanent residence. Some positions may require fingerprinting. Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.
Benefits Benefits of Working for NYS: generous benefits package worth 65% of salary, including:
Holiday & Paid Time Off
Thirteen (13) paid holidays annually
Up to Thirteen (13) days of paid vacation leave annually
Up to Five (5) days of paid personal leave annually
Up to Thirteen (13) days of paid sick leave annually for PEF
Up to three (3) days of professional leave annually to participate in professional development
Health Care Benefits
Eligible employees and dependents can pick from a variety of affordable health insurance programs
Family dental and vision benefits at no additional cost
Additional Benefits
New York State Employees’ Retirement System (ERS) Membership
NYS Deferred Compensation
Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
Public Service Loan Forgiveness (PSLF)
And many more.
Equal Opportunity Employer The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.
Job Details Seniority level: Mid‑Senior level
Employment type: Full‑time
Job function: Science, Information Technology, and Engineering Industries: IT Services and IT Consulting
#J-18808-Ljbffr