Information Systems Security Manager

About the role

This is a highly technical and administrative position responsible for protecting municipal computer systems, networks, cloud services, virtual infrastructure, physical security systems, and data from cybersecurity threats.

Responsibilities

• Configures, deploys, and maintains security technologies, including firewalls, intrusion detection/prevention systems, endpoint protection platforms, and encryption tools.
• Administers and secures Active Directory, Microsoft Entra ID (Azure AD), Microsoft 365, and related cloud services through identity, authentication, and security best practices.
• Maintains email security technologies, investigates phishing attempts, and implements measures to reduce spam, malware, and other email-based threats.
• Administers user accounts, roles, and permissions to support least-privilege principles and protect sensitive municipal data.
• Monitors and manages systems, logs, and alerts to identify potential threats, performance issues, or suspicious activities and responds promptly as necessary.
• Performs regular vulnerability scans, risk assessments, and (when appropriate) penetration testing and recommends and supports remediation activities.
• Captures and maintains operating system, application, and firmware updates; implements secure configuration standards and verifies timely remediation of identified vulnerabilities.
• Assists in developing, maintaining, and executing incident response plans; investigates and documents security incidents to ensure timely resolution and minimal service disruption.
• Supports and verifies backup, disaster recovery, and business continuity processes, including periodic testing to ensure the availability and recoverability of critical municipal systems.
• Contributes to the creation, review, and implementation of IT security policies and procedures; supports compliance with federal, state, and local cybersecurity and data privacy regulations.
• Assists with internal and external security audits and provides documentation supporting regulatory and compliance requirements.
• Provides end-user support on security matters, delivers training on safe computing practices, and promotes cybersecurity awareness across town departments.
• Supports the administration, monitoring, maintenance, and security of the town's VMware vSphere virtual infrastructure, including virtual machines, hosts, storage, and backup operations.
• Researches, evaluates, and recommends emerging security tools, solutions, and best practices to strengthen the towns security posture.
• Coordinates with technology vendors regarding support, maintenance, licensing, warranties, procurement activities, and project implementation as directed by the Director of Information Technology.
• Creates and maintains detailed documentation, including system configurations, security incidents, audit logs, and policy updates.
• Maintains and supports electronic access control, security camera infrastructure, and related physical security technologies; coordinates maintenance, upgrades, and vendor support as needed.

Qualifications

• Strong technical knowledge and hands-on experience in identifying, analyzing, and mitigating security risks.
• Proactive thinking, continuous learning, and adaptability to evolving cybersecurity threats and technologies.
• Occasional after-hours work may be required to support critical incidents or system maintenance.