Information Technology Specialist 3 Information Security

Description
Duties Description
Under the Supervisor Administrative Analyst, SG-25, this position will provide support and oversight for the Internal Controls program within the Chief Information Security Office (CISO) and the Office of Information Technology Services (ITS). The New York State Governmental Accountability, Audit and Internal Control Act of 1987 (Internal Control Act) required State agencies and other organizations to promote and practice good internal control and to provide accountability for their activities. Pursuant to this Act, the incumbent will be responsible for conducting and reporting on a comprehensive evaluation of the internal controls associated with the execution of key and significant functions within NYS ITS.

The position requires communicating orally and in writing with various individuals including management, users, vendors, and other IT staff. The incumbent will have to work with ITS teams and upper-level agency management to resolve technically complex and politically sensitive issues under pressure.

The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.

Duties Include, But Are Not Limited To

• Facilitate meetings with CISO and ITS management and other personnel to develop the annual Internal Control Testing Plan and monitor successful and timely completion.
• Oversee the assistance provided to ITS management and control-owners with the creation of business processes and supporting flowcharts as it relates to Internal Control requirements.
• In conjunction with control-owners, supervise tests of ITS controls, both technical and cybersecurity controls, providing guidance on responses and recommend process improvements where appropriate.
• Maintain an in-depth knowledge of State and Federal legislative requirements.
• Review State and Federal legislative changes that may impact ITS policy and procedures related to internal controls.
• Assist CISO and ITS management with updating program policies and procedures to enhance internal controls and continue to adhere to the Internal Controls Act of 1987
• Contribute to the review and publication of Cybersecurity policies working closely with the CISO Governance & Compliance team.
• Contribute to the development of management action plans as the result of internal and external audit recommendations.
• Monitor, track, and report on management action plans through to implementation or closing of an Internal Control program recommendation.
• Develop reports to provide management with periodic key performance measures (KPIs).
• Develop and maintain standard operating procedures (SOPs) to support function of the Internal Control program.
• Provide internal control and process improvement consultation and training concerning internal control matters.
• Supervise and manage staff when required.
• Perform additional duties as required.

Qualifications
Minimum Qualifications
Information Technology Specialist 3 (Information Security)

Non-competitive: five years of information technology, cybersecurity, or information assurance experience**.

• Substitutions: A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor's substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor's degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master's degree or higher in computer science or related field substitutes for one year of required experience.

Additional Comments
ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non-immigrant aliens for temporary work authorization visas or for permanent residence.

Some positions may require fingerprinting.

Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.

If eligible, positions located in New York City will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.

to permanent non-competitive and the official probationary period will begin.

Benefits of Working for NYS Generous benefits package, worth 65% of salary, including:

Holiday & Paid Time Off

• Thirteen (13) paid holidays annually
• Up to Thirteen (13) days of paid vacation leave annually
• Up to Five (5) days of paid personal leave annually
• Up to Thirteen (13) days of paid sick leave annually for PEF.
• Up to three (3) days of professional leave annually to participate in professional development

Health Care Benefits

• Eligible employees and dependents can pick from a variety of affordable health insurance programs
• Family dental and vision benefits at no additional cost

Additional Benefits

• New York State Employees' Retirement System (ERS) Membership
• NYS Deferred Compensation
• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
• Public Service Loan Forgiveness (PSLF)
• And many more.

The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.