Principal Security Engineer

About the role

The Department of Records and Information Services is seeking a Computer Systems Manager Non-Manager to serve as the Chief Information Security Officer (CISO). This position is responsible for compliance with the Citywide Information Security Policies and for high-level support of the agency’s computing infrastructure. The role requires an experienced technology professional with hands-on experience in networks, servers, and software configuration standards for enterprise systems.

Responsibilities

• Coordinate upgrades to the agency’s technology with the Office of Technology and Innovation.
• Oversee security awareness strategy and programs, including annual employee training and ongoing awareness campaigns to ensure adherence to information technology policies and standards.
• Ensure compliance with City of New York, Citywide Information Security Policies.
• Track cyber security incidents and vulnerability reports; work on remediation of issues.
• Ensure identity and access management policies are documented.
• Produce documentation as needed.
• Ensure all IT systems are equipped and updated with necessary cyber protection tools.
• Continuously check for security gaps, document findings, and take corrective measures.
• Verify patches and software updates are properly applied; resolve missing patches or inconsistencies.
• Analyze vulnerability reports and operationalize remediation with the tech support team.
• Assess endpoint system health and suggest improvements or remediation steps.

Work Location

31 Chambers Street, New York, NY 10007. Travel to off-site facilities in Middle Village and Sunset Park is required.

Schedule

Day/Full-time. Due to the technical duties of this position, the candidate may be required to be on call and/or work various shifts, including weekends and/or evening shifts.

Qualifications

Candidates must meet one of the following education and experience requirements:

• A master's degree in computer science from an accredited college or university and three (3) years of progressively responsible, full-time IT experience (applications development, systems development, data communications, networking, database administration, data processing, or user services). At least eighteen (18) months must have been in an administrative, managerial, or executive capacity in these areas or supervising staff performing these duties.
• A baccalaureate degree from an accredited college or university and four (4) years of progressively responsible, full-time IT experience as described above.
• A four-year high school diploma or equivalent and six (6) years of progressively responsible, full-time IT experience as described above.
• A satisfactory combination of education and experience equivalent to the above options. All candidates must have at least a four-year high school diploma or equivalent and three (3) years of IT experience, including eighteen (18) months in an administrative, managerial, executive, or supervisory capacity.

Additional substitution rules:

• In the absence of a baccalaureate degree, undergraduate credits may substitute for a maximum of two (2) years of the required IT experience (30 semester credits = six (6) months of experience).
• Graduate credits in computer science may substitute for a maximum of one (1) year of the required IT experience (30 graduate semester credits = one (1) year of experience).
• Undergraduate and/or graduate credits may not substitute for the eighteen (18) months of administrative, managerial, executive, or supervisory experience.

Pay

Salary band: $125,000 to $150,000.