Under general direction, the Cyber Security Administrator is responsible for the availability, safety, confidentiality and integrity of Sandoval County’s information technology assets; protects the county from cyber intrusions and exfiltration of the County’s data; serves as the primary advisor on information security issues; fosters the development of new protective technologies and policies and processes; provides guidance to the County to plan, coordinate, implement, update, and communicate a proactive program using knowledge of information systems security concepts and techniques; assist in developing, implementing and maintaining a Continuity Of Operations Plan (COOP) and a Disaster Recovery Plan to recover from any major incidents and to continue the County’s critical operations in the interim; creates and implements a cyber security plan.

A job description is intended to present a general list of tasks/duties performed by employees within this job. Job descriptions are not intended to list all duties performed within the job. 

Education and Experience:

• Bachelor’s Degree in Information Technology or related field; OR 4 years’ experience in cyber security; OR an equivalent combination of education and experience; AND
• Cyber Security Certification. 

Required Licenses or Certifications:

• Certification in at least one of the following within one year of hire: Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Offensive Security Certified Professional (OSCP), or Certified Information Systems Security Professional (CISSP)
• Within 9 months of hire, must acquire CJIS – Criminal Justice Information System and must be able to pass CJIS background check. 
• Valid New Mexico driver’s license or ability to obtain a valid New Mexico driver’s license within 30 days of hire.

• Works with Network and Systems Engineers and their respective teams to identify vulnerabilities and needed patches and assist both teams in ensuring network and systems assets are patched on compliant on a regular basis.

• Review Sandoval County’s policies that relate to IT and cyber security, recommend additions and enhancements and periodically check to ensure those policies are being followed and the Department and the County are in compliance with those policies.
• Lead members of Sandoval County’s Security team, running weekly security assessment meetings with the team and directing the team to address any issues identified in that meeting. 
• Runs and manages Sandoval County’s cyber security awareness and education training, picking training topics and course material under the direction of the Director and Deputy Director, evaluates responses and makes recommendations for new course and training that will focus on gaps or issues identified in the training.
• Researches and recommends new technologies or gaps in our organizational or departmental security for review and inclusion on the budget.
• Meet with executive management, insurance companies and bond rating agencies regarding all elements of Sandoval County’s cyber security.
• Performs other job-related duties as assigned.