Mainframe Security Manager - Resource Access Control Facility

Essential Functions

• Under administrative direction, serves as the Mainframe Security Manager Resource Access Control Facility (RACF) for the Department of Innovation & Technology (DoIT), overseeing and managing the RACF administration and maintenance across mainframe environments, including configuring and maintaining user and group security profiles, access lights, and permissions within a z/OS environment.
• Conducts and coordinates in-depth studies involving substantial technical research and systems analysis related to RACF security, including conducting reviews of complex components and processes making recommendations for modifications to provide availability, flexibility, and usability for clients.
• Develops, writes, implements, and interprets policies, procedures, standards, and methodologies for the project team to ensure compliance with internal controls, audit requirements, and best practices, including leading the diagnosis and resolution of complex RACF security issues.
• Establishes, maintains, and manages documented processes ensuring appropriate security control over mainframe user access, including aligning operational procedures with applicable Audit Playbook, SOC Audit Control Matrices, and SOC Audit Description of Service.
• Serves as a working supervisor.
• Keeps abreast of new developments in the information technology field by continuing education through online training platforms, meetings, training sessions, seminars, and conferences to increase familiarity with and remain current on products, vendors, techniques, and procedures.
• Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.

Minimum Qualifications

• Requires knowledge, skill, and mental development equivalent to completion of four (4) years of college with coursework in management information systems, data processing, telecommunications or directly related information technology fields.
• Requires prior experience equivalent to three (3) years of progressively responsible administrative experience in management information systems, data processing, or telecommunications in a public or business organization.