Chief Information Security Officer

The Fire Department of the City of New York (FDNY) is the largest Fire Department in the United States and universally is recognized as the world's busiest and most highly skilled emergency response agency. The Department's main goal is to provide fire protection, emergency medical care, and other critical public safety services to residents and visitors in the five boroughs. FDNY members are sworn to serve and protect life and property and the Department works to continually educate the public in fire, life safety and disaster preparedness, along with enforcing public safety codes. Since its inception in 1865, FDNY has helped lead efforts to make New York the safest big city in the nation. This accomplishment requires a steadfast and daily commitment to maintaining the Department's core values. The Fire Department, City of New York (FDNY), seeks a full-time Chief Information Security Officer in the Bureau of Technology Development & Systems. The successful candidate will be responsible for developing and implementing an organization's information security strategy to protect data and systems from cyber threats. Key Responsibilities: Establish Security Strategy: Develop and maintain the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. Risk Management: Identify, assess, and mitigate information security risks to ensure the confidentiality, integrity, and availability of data. Policy Development: Create and implement security policies, procedures, and standards to safeguard the organization’s information assets. Incident Response: Lead the response to security incidents and breaches, coordinating with relevant departments to minimize damage and prevent future occurrences. Compliance: Ensure compliance with relevant laws, regulations, and industry standards, such as GDPR and ISO 27001. Team Leadership: Manage and direct a team of IT security professionals, providing guidance and support in their roles. Collaboration: Work closely with other executives to align security initiatives with broader business objectives and goals. Security Awareness: Promote security awareness and training across the organization to ensure all employees understand their roles in maintaining security.

Minimum of 6 years’ experience managing information security programs, developing, and applying information security, risk management, and privacy practices in local, state, or federal government. - Minimum of 6 years’ practical experience designing and implementing IT security solutions deep understanding of various security threats and preventative measures. - Familiarity with cyber-security frameworks such as NIST, CIS Controls, PCI-DSS, HIPAA etc. - Strong demonstrated knowledge of LAN/WAN, systems administration, active directory, PowerShell, group policy, virtualization, cloud and IT security technologies. - Experience with systems access management, change management, security monitoring and intrusion detection, vulnerability management, endpoint security management, cloud security, data loss prevention, encryption, network security, disaster recovery, data management, physical security, vendor management. - Experience with CrowdStrike, McAfee, Pulse Secure, Cisco, firewalls, Windows Server, Rapid7, MS Office 365, Endpoint Security and Enterprise Mobility in the cloud. - IT certifications (1 or more) such as Security+, CISSP, CISA, CISM, CySA+, CRISC, C-CISO, SSCP, CASP, CEH, GIAC

New York City Residency is not required for this position

All applicants please visit cityjobs.nyc.gov. Search for open Jobs, and type in the Job ID # listed above. City of New York employees please include your employee reference number on your cover letter and resume.