Information Security Administrator (Information Security Admin)

We need to output HTML fragment with sections only where there is real specific content. The posting includes "General Purpose" and "Essential Duties and Responsibilities" and "Employment Standards / Minimum Qualifications". There's no explicit Pay, Schedule, Benefits sections. So we should have headings for those sections present: maybe "General Purpose", "Essential Duties and Responsibilities", "Employment Standards / Minimum Qualifications". Use

for each heading. Then content: For General Purpose, there is no explicit text? The snippet shows "## General Purpose ## Essential Duties and Responsibilities". Likely the General Purpose section is empty or just heading. We should not emit a heading with filler/placeholder text. Since there is no content after "General Purpose", we should omit that section. The essential duties and responsibilities have a lot of content. Employment Standards / Minimum Qualifications also have content. Thus we output

Essential Duties and Responsibilities

then maybe a

with the introductory sentence? The content starts with "The duties listed below are intended only as illustrations..." then a list of duties. We need to format as prose paragraphs and lists. We need to preserve all substantive information, not invent or summarize away detail. So we need to keep the sentences as is, but we can break into paragraphs for readability. Use

for prose,

• for lists. We need to identify list items: The duties are semicolon-separated sentences. Could treat each duty as a list item. The text: "Researches, develops, implements and enhances a District-wide IT security framework including security policies, standards, procedures and applications intended to prevent the unauthorized access, use, disclosure, modification, loss or destruction of District data and assets; works with the Infrastructure Systems Engineer, District and College directors and other IT staff to ensure the integrity and security of the Districts IT infrastructure; reviews the development, testing and implementation of IT security products, protocols and control methods in all Colleges, locations and departments throughout the District." That's three items separated by semicolons. Then next sentence: "Consults with application developers, the Academic Technology Systems Specialist and other technical staff to ensure production application network security protocols meet established IT security policies and standards and cyber security best practices; advises on security considerations for system architecture design, software development, and technology procurement processes." Two items. Then "Promotes and coordinates the development of training and education on IT security and privacy awareness topics for District administrators, faculty and staff; develops appropriate security-incident notification procedures for District management." Two items. Then "Conducts vulnerability assessments to identify existing or potential electronic data and information system compromises and their sources; monitors security systems, networks and infrastructure for security threats and unauthorized access; oversees the configuration and use of a variety of systems, tools and processes to monitor for intrusions and other security threats." Three items. Then "Coordinates cybersecurity incident response and investigation of IT security incidents with law enforcement agencies; analyzes remediation with system and data owners; tracks remediation to closure and verifies effectiveness; escalates material security impacts or exceptions to the administrator." Four items. Then "Administers and documents security technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), Security Information and Event Management (SIEM) platforms, endpoint detection and response (EDR) tools, and identity and access management (IAM) systems under change management." One item (though includes list inside but it's part of description). Then "Performs audits and periodic inspections of the District IT infrastructure (applications, databases, hardware, networks, web portals and applications, etc.) to ensure security measures are functioning and effectively utilized and recommends appropriate remedial measures to eliminate or mitigate future system compromises." One item. Then "Reviews, evaluates, and recommends software and hardware products related to IT system security, such as virus scanning and repair, encryption, firewalls, internet filtering and monitoring and intrusion detection." One item. Then "Develops and maintains documentation of security incidents, vulnerabilities, audit results and risk assessments; prepares comprehensive reports on security posture; maintains and improves technical content for disaster recovery and business continuity plans; conducts regular security drills and recovery tests and proposes improvements based on outcomes." Four items. Then "Contributes to and participates in supporting the Districts Information Systems governance groups." One item. Then "Maintains up-to-date technical knowledge by attending educational workshops, reviewing professional publications, establishing personal networks and participating in professional associations; monitors compliance with applicable cybersecurity regulations, standards, and frameworks and assists in implementing corrective actions, security controls, and process improvements to maintain compli nce and reduce organizational risk." Two items (note typo "compli nce"). Then "Demonstrates sensitivity to and understanding of historically minoritized groups and participates in professional development activities to increase cultural competency to enhance equity-minded practices within the District." One item. Then "Other Duties May participate in the review of IT facility acquisition, construction and remodeling projects to ensure conformity to established security policies and guidelines. May be required to serve as a witness or subject-matter expert for the department in legal matters concerning IT systems security. Attends various meetings and participates on committees as required. Performs related duties as assigned." This seems like a paragraph. We need to decide how to format: Could keep as
  • for each duty item. The "Other Duties" could be a

    . Now Employment Standards / Minimum Qualifications: Contains "Knowledge Of KNOWLEDGE, SKILLS AND ABILITIES" then a list of knowledge items separated by semicolons? Let's parse. Text: "Knowledge Of KNOWLEDGE, SKILLS AND ABILITIES Principles, practices and methods of security infrastructure and vulnerability management, including evolving sources of security threats and vulnerabilities; preventative security controls and common security management frameworks. Current trends and advancements in enterprise systems and enterprise-wide security. Principles and practices of secure network, applications and database design. Advanced methods and procedures for conducting security audits, performing evaluations and risk assessments and developing business continuity plans. Theory and principles of network and operating system design, integration and management. Information systems and architectures used in a college setting. Principles and practices of sound business communication including proper English usage, grammar, spelling and punctuation. Principles and practices of public administration, including budgeting, purchasing and maintaining public records. Research methods and analysis techniques. Server virtualization technologies." That seems like a list of knowledge areas, each separated by periods? Actually each ends with a period. Could treat each sentence as a list item. Then "Skills And Abilities To Lead and participate in the development, implementation, integration and administration of a comprehensive District-wide security protection framework including policies, standards and guidelines. Apply advanced professional knowledge of systems engineering and architecture concepts, principles, phenomena and relationships to support security management, preventive maintenance and critical systems and equipment. Analyze policy, trends and intelligence to better understand how security threat adversaries may think or act, using deductive reasoning and problem-solving skills to develop appropriate preventative and countermeasures. Apply critical thinking skills to isolate problem causes, perform root cause analysis and formulate solutions. Identify security management issues and opportunities, analyze problems and alternatives, formulate complex technical solutions and develop sound conclusions and recommendations. Build teamwork and collaboration with other IT units, colleges and departments to optimize effectiveness of the District security program. Effectively engage and support historically minoritized groups by addressing issues of equity and improving culturally responsive service-oriented practices. Communicate effectively, both orally and in writing. Conduct co" It ends abruptly "Conduct co". Probably truncated. We need to preserve as is, not invent. So we include that incomplete sentence as is. We need to format as

    • for each sentence. We should not include headings for empty sections. Thus final HTML:

      Essential Duties and Responsibilities

      • Researches, develops, implements and enhances a District-wide IT security framework including security policies, standards, procedures and applications intended to prevent the unauthorized access, use, disclosure, modification, loss or destruction of District data and assets;
      • works with the Infrastructure Systems Engineer, District and College directors and other IT staff to ensure the integrity and security of the Districts IT infrastructure;
      • reviews the development, testing and implementation of IT security products, protocols and control methods in all Colleges, locations and departments throughout the District.
      • Consults with application developers, the Academic Technology Systems Specialist and other technical staff to ensure production application network security protocols meet established IT security policies and standards and cyber security best practices;
      • advises on security considerations for system architecture design, software development, and technology procurement processes.
      • Promotes and coordinates the development of training and education on IT security and privacy awareness topics for District administrators, faculty and staff;
      • develops appropriate security-incident notification procedures for District management.
      • Conducts vulnerability assessments to identify existing or potential electronic data and information system compromises and their sources;
      • monitors security systems, networks and infrastructure for security threats and unauthorized access;
      • oversees the configuration and use of a variety of systems, tools and processes to monitor for intrusions and other security threats.
      • Coordinates cybersecurity incident response and investigation of IT security incidents with law enforcement agencies;
      • analyzes remediation with system and data owners;
      • tracks remediation to closure and verifies effectiveness;
      • escalates material security impacts or exceptions to the administrator.
      • Administers and documents security technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), Security Information and Event Management (SIEM) platforms, endpoint detection and response (EDR) tools, and identity and access management (IAM) systems under change management.
      • Performs audits and periodic inspections of the District IT infrastructure (applications, databases, hardware, networks, web portals and applications, etc.) to ensure security measures are functioning and effectively utilized and recommends appropriate remedial measures to eliminate or mitigate future system compromises.
      • Reviews, evaluates, and recommends software and hardware products related to IT system security, such as virus scanning and repair, encryption, firewalls, internet filtering and monitoring and intrusion detection.
      • Develops and maintains documentation of security incidents, vulnerabilities, audit results and risk assessments;
      • prepares comprehensive reports on security posture;
      • maintains and improves technical content for disaster recovery and business continuity plans;
      • conducts regular security drills and recovery tests and proposes improvements based on outcomes.
      • Contributes to and participates in supporting the Districts Information Systems governance groups.
      • Maintains up-to-date technical knowledge by attending educational workshops, reviewing professional publications, establishing personal networks and participating in professional associations;
      • monitors compliance with applicable cybersecurity regulations, standards, and frameworks and assists in implementing corrective actions, security controls, and process improvements to maintain compli nce and reduce organizational risk.
      • Demonstrates sensitivity to and understanding of historically minoritized groups and participates in professional development activities to increase cultural competency to enhance equity-minded practices within the District.

      Other Duties May participate in the review of IT facility acquisition, construction and remodeling projects to ensure conformity to established security policies and guidelines. May be required to serve as a witness or subject-matter expert for the department in legal matters concerning IT systems security. Attends various meetings and participates on committees as required. Performs related duties as assigned.

      Then

      Employment Standards / Minimum Qualifications

      • Principles, practices and methods of security infrastructure and vulnerability management, including evolving sources of security threats and vulnerabilities; preventative security controls and common security management frameworks.
      • Current trends and advancements in enterprise systems and enterprise-wide security.
      • Principles and practices of secure network, applications and database design.
      • Advanced methods and procedures for conducting security audits, performing evaluations and risk assessments and developing business continuity plans.
      • Theory and principles of network and operating system design, integration and management.
      • Information systems and architectures used in a college setting.
      • Principles