Cyber Security Director

The County of Nassau seeks a highly skilled Cyber Security Director to lead its Information Security program. This senior executive will be responsible for crafting and overseeing policies and initiatives aimed at mitigating compliance, operational, strategic, financial, and reputational security risks associated with safeguarding the County's data, systems, and technology.

Key Responsibilities:

• Establish a strategic and comprehensive information security program that defines, develops, maintains, and implements policies and processes ensuring consistent, effective information security practices.
• Lead the design and implementation of robust security controls to identify vulnerabilities and fortify digital files and electronic infrastructures.
• Guide teams in enhancing, maintaining, and updating security technologies to ensure the secure utilization of computer networks and the secure transmission and retrieval of information.
• Address disaster recovery, business continuity, and risk management needs within the County.
• Vigilantly monitor and respond to computer security breaches, viruses, intrusions, and conduct forensic investigations as needed.
• Cultivate and maintain cybersecurity partnerships for intelligence sharing and coordinated responses within the County and across the region.
• Develop and administer current security policies, oversee their approval, training, and dissemination, manage security and risk awareness, and implement and monitor department training and reporting programs.

Requirements:

• Graduation from a federally-accredited or New York State-registered college with a Bachelor's Degree in Information Technology security, computer information systems, computer science, management information systems, or a related field.
• Seven (7) years of experience in Information Technology security.
• A Certified Information Systems Security Professional (CISSP) certificate is required within one year.

Preferred Skills:

• 10+ years of experience in cybersecurity.
• Fundamental understanding of cybersecurity technologies in a municipal setting.
• Proficiency in an interpreted programming language.
• Familiarity with attacker tactics, techniques, and procedures.
• Background in malware analysis, intrusion detection, and/or threat intelligence.
• Experience in threat hunting, proactively investigating potential risks and identifying suspicious behavior in networks using threat intel.
• Proficiency in host and memory forensics for Windows, OSX, and/or Linux.
• Extensive knowledge across the Security domain with a deep focus on one or more areas such as Logs and events processing, Incident Management, Detection, and/or response tool development.
• Previous experience in a Security Operations Center (SOC) & MITRE Framework.
• Experience in scoping, implementing and analyzing network and host-based SEIM solutions.

How to Apply:

Please submit your resume and cover letter to jobs@nassaucountyny.gov.

Nassau County residency is preferred.

NASSAU COUNTY IS AN EQUAL OPPORTUNITY EMPLOYER

PERSONNEL CHOSEN FOR MERIT AND FITNESS WITHOUT REGARD TO RACE, RELIGION, SEX, AGE, NATIONAL ORIGIN, DISABILITY, MARITAL STATUS OR ANY OTHER BASIS PROTECTED BY LAW.