Bachelor's degree with 15 credit hours in Cyber Security, Information Assurance, or Informational Technology AND two (2) years of information technology experience including one (1) year of information security or information assurance experience**
OR
Bachelor’s degree* in Information Security, Cyber Security, Digital Forensics, Information Assurance, or Information Technology related field AND three (3) years of information technology experience including one (1) year of information security or information assurance experience.
Two (2) or three (3) years of information technology experience depending on bachelor’s degree* and One (1) year of information security or information assurance experience**

• Substitution: Bachelor's degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor's degree on a year for-year basis; an associate degree requires an additional two years of general information technology experience.

**Experience solely in information security or information assurance may substitute for the general information technology experience above.

Knowledge, Skills, and Abilities:

• Working knowledge of:

o Information Security (CIA triad, Information Classification, Risk Management).
o Information Security Frameworks (NIST Cyber Security Framework, CIS Controls).
o Vulnerability Management.

• Demonstrated experience with auditing and monitoring solutions.
• Proficient in Microsoft Excel and SQL Developer.
• Demonstrated critical thinking, problem solving and analytical skills.
• Demonstrated skills in facilitating meetings, listening, and negotiating between multiple stakeholders to drive results.
• Excellent verbal and written communication skills including the ability to clearly articulate information technology and information security concepts that allow the business and management to make informed decisions.
• Ability to maintain confidentiality.

Telecommuting:
The Office of the New York State Comptroller (OSC) supports telecommuting where it is reasonable to do so based upon the agency’s mission and operational needs. Generally, employees new to OSC will be restricted from telecommuting for at least 8 calendar weeks. After the initial 8 calendar week restriction, if an employee’s duties and work performance are aligned with telecommuting they may be allowed to do so. Upon approval to telecommute, OSC employees may telecommute up to 5 days per pay period.