CHIEF SECURITY OFFICER

About the role

The County of Monterey Information Technology Department (ITD) is seeking a Chief Security Officer (CSO) to lead the County's information security operations and supervise a team of security engineers. The ideal candidate will have a proven track record in information security administration, network systems, and desktop systems, with at least six years of increasingly responsible professional experience.

Responsibilities

• Acts as a consultant to all County information technology functions in the review of security policies, computer operations, access controls, system security, computer applications, and network and data security.
• Develops, promotes, and presents security awareness education to all levels of the County organization.
• Reviews all system-related information security plans throughout the County's network to ensure alignment between security practices.
• Plans, prioritizes, and reviews the work of assigned staff.
• Consults with the County Counsel's Office to provide legal investigative services related to information technology.
• Maintains current knowledge of applicable federal and state laws, accreditation standards, and monitors information security technologies to ensure organizational adoption and compliance.
• Develops, establishes, implements, and directs the County's information technology security program across all departmental divisions and units.
• Leads and trains the Information Security Response Team; coordinates all incident preparedness activities.
• Upon request, conducts security risk assessments, and business impact analysis of all County departments, in coordination with departmental security assessment teams/staff.
• Maintains current knowledge of applicable federal and state laws, accreditation standards, and monitors information security technologies to ensure organizational adoption and compliance; maintains up-to-date knowledge of general threats to local government and methods of attack.
• Works with County-wide task forces, committees, and departmental liaisons to implement security policies, procedures, and infrastructure modifications.

Requirements

• Thorough Knowledge Of Principles and methods used in the analysis and development of information security systems and procedures.
• Principles of management and supervision.
• Currently accepted information security standards, guidelines and theories.
• Computer technology.
• Information technology equipment operation, capacity and capability.
• Analytical techniques relating to the assessment of business needs and the generation of management decision making information.
• Information technology security practices.
• Current information security regulations, including Federal Information Security Management Act, Federal Risk and Authorization Management Program, Federal Information Processing Standard, National Institute of Standards and Technology, Health Insurance Portability and Accountability Act, Personally Identifiable Information, and Protected Health Information, and various other laws, regulations and statues.
• Hacker tools and techniques used to gain unauthorized access to computer systems.

Skills and Abilities

• Analyzing, assessing, and interpreting complex data, policies, procedures, regulations, and legislation.
• Understanding and applying the technologies used to collect, access, store, and transmit information in all forms.
• Identifying information security needs for the County.
• Effectively motivating, supervising, and directing the work of others.
• Preparing and presenting effective, clear, and concise reports and correspondence.
• Analyzing problems, identifying solutions, and making recommendations.
• Prioritizing and meeting project timelines.
• Establishing and maintaining effective working relationships.
• Exercising good judgment, decisiveness, and creativity.

Qualifications

• Any combination of training, education, and/or experience which provides the knowledge, skills and abilities and required conditions of employment.
• Education: Possession of a bachelor's degree in Information Security, Computer Science, or a closely related field from an accredited four-year college or university; AND Experience: At least six (6) years of increasingly responsible professional experience performing varied and complex work in the areas of information security administration, network systems, and/or desktop systems, including at least two (2) years of experience supervising or managing technical staff, and/or serving as a technical expert.

Benefits

The County of Monterey offers an excellent benefits package, including health insurance, retirement plans, and paid time off. For more information, please visit our website.

Pay

The salary range for this position is TBD, based on experience and qualifications.

Schedule

The schedule for this position is TBD, based on experience and qualifications.

Benefits

The County of Monterey offers an excellent benefits package, including health insurance, retirement plans, and paid time off. For more information, please visit our website.

Notes

To assess applicants' possession of required qualifications, the examination process may include an oral examination, pre-examination exercises, performance examination, and/or written examination. The competitive examination process includes submittal of required application materials. A complete application package will include: A completed County of Monterey Employment Application Responses to the Supplemental Questions All application materials must be received by the priority screen date for a guaranteed review. Resumes, cover letters, letters of interest, and other correspondence will not be accepted as a substitute for required application materials. All required application materials will be competitively evaluated. Those applicants that are determined to be the most appropriately qualified will be invited to participate further in the selection process.

Equal Opportunity and Reasonable Accommodation

The County of Monterey is a drug-free workplace and an equal opportunity employer. The County seeks candidates who can make contributions in an environment of cultural and ethnic diversity. The County is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities.