POSITION OVERVIEW

• Responsible for communicating cyber risks and recommendations to mitigate risks to the City of Houston (COH) Chief Information Security Officer (CISO)
• Support and maintain current COH information security awareness program that effectively motivates desired behaviors to promote responsible data handling and system use.
• Evaluate the effectiveness of existing information security training, education, and awareness program/activities.
• Create a metrics framework that can effectively measure engagement, behaviors, and training impact.
• Act as department program coordinator for CJIS Clearance Program
• Responsible for all employee (and employee managers, as appropriate) related communications, process, tracking and storing of PII related to CJIS.
• Conduct CJIS requirements and documentation functions.
• Responsible for tracking all CJIS Online Training compliance for each employee, as appropriate.
• Serves as the subject matter expert for CJIS clearance processes and procedures by accurately advising HITS employees and managers on the appropriate actions needed to proceed.
• Maintain strictest confidentiality of sensitive materials and information.
• Conducts basic malware analysis of attacker tools and identifies indicators of compromise (IOC)s.
• Manage the Security Operations Center (SOC) mailbox and monitor and analyze the emails for threats including phishing and malware and escalates per procedures.
• Participates in the investigations of information security incidents and may prepare reports on intrusions as required.
• Perform real-time detection, analysis, and response to threats via an EDR tool.
• Track, provide, and present analysis into observed attacks against the COH.
• Assist with designing and documenting work processes.
• Must have ability to learn technical subject matter quickly.
• Must have the drive to continuously learn and keep pace with a fast moving and dynamic industry.

MINIMUM REQUIREMENTS

PREFERENCES

• Knowledge of SIEM, IDS, anti-virus/anti-malware and firewall technologies
• Understanding of networking and TCP/IP
• Experience with a wide variety of operating systems: Windows Server 2016, 2019, 2022, Windows 10, Windows 11, Linux etc.
• Ability to troubleshoot technical and security related issues.
• Experience working in a rapidly changing, high intensity environment.
• Avid, proactive learner and ability to work well in a team-based environment.
• Strong interpersonal and writing skills.
• Candidate required to obtain Security certification during first year of employment.

GENERAL INFORMATION