Requisition No: 828135 

Agency: Florida Gaming Control Commission

Working Title: IT SECURITY MANAGER

 Pay Plan: Career Service

Position Number: 41500055 

Salary: $68,000 - $84,000 

Posting Closing Date: 05/09/2024 

Total Compensation Estimator Tool

Florida Gaming Control Commission
Office of Information Technology

SYSTEMS PROGRAMMING CONSULTANT

Working Title: IT Security Manager

Position Number: 41500055

Hiring Salary: $68,000.00 - $84,000.00 annually

*OPEN COMPETITIVE*

(Anticipated Vacancy)

Overview:

The Florida Gaming Control Commission (FGCC) is a five-member commission appointed by the Governor. The FGCC is charged with investigating and enforcing Florida pari-mutuel and gaming statutes and rules.

The FGCC seeks an Information Security Manager (ISM) to help secure our growing infrastructure and IT team. This role will report directly to the Chief Information Officer and the Chief Information Security Officer (CISO) and serve as a leader to our growing agency.

This position will lead the management and configuration of network and security architecture components and provide in-depth technical support to the enterprise (T2/T3 Support Level). The position will generally supervise and monitor the technical day-to-day operations of network users to ensure the network and IT infrastructure are optimized and secured through tool monitoring and analysis and leading incident response. The position will be an in-house consultant for strategic initiatives, policy & procedure development, inter-agency policy alignment, and security design.

Position Duties and Responsibilities:

• Implement, monitor, and maintain security systems and provide early response to potential threats.
• Analyze technologies and establish highly effective processes and protocols to ensure comprehensive protection exists to prevent unauthorized entry into company networks and systems.
• Drive the creation of countermeasures to protect information assets with IR playbook development and defense-in-depth strategies.
• Maintain a comprehensive logging and monitoring methodology for the enterprise.
• Document, prioritize, and formally report incidents, root cause analyses, and after-action reviews.
• Coordinate between internal and external resources protecting enterprise systems. Manage related third parties to ensure Service Level Agreements, expectations, and contractual requirements are being achieved.
• Responsible for host intrusion prevention/detection systems, threat intelligence platforms, endpoint protection, email security, forensic tools, public/private/hybrid cloud infrastructure, identity and access management systems, and defense of physical security systems.
• Work closely with system owners to advise and support remediation efforts to close vulnerability exposure to new threats in the wild and verify the organization’s security posture against them.
• Provide support to business groups launching new technology applications and services to verify that new offerings are effectively logging and reporting activity.
• Communicate incident activity in a manner understood by technical and non-technical business units and gain support through influential messaging.
• Understand breach and attack simulation solutions to validate and improve the effectiveness of preventative controls and incident response.
• Manage and ensure effective security solutions, including but not limited to firewalls, anti-virus solutions, and intrusion detection systems.
• Implement and maintain Microsoft E5 and other security products and tools.
• Provide security support for the organization's information systems and peripheral equipment, such as servers, printers, storage devices, mobile devices, network devices, and VoIP or Collaboration solutions.
• Develop business relationships to make sure IT objectives align and support business objectives.
• Will be a point of contact for all IT Security needs and related vendor management, including meeting coordination and contract reviews.
• Research threat intelligence and the latest information technology security trends to keep current with the subject and use the latest technology to protect information.
• Develop a security plan for best standards and practices.
• Develop rules and procedures as part of the security plan.
• Conduct frequent testing of simulated cyber-attacks to look for vulnerabilities in the computer systems and enact preventative remediation.
• Make recommendations to managers about security advancements to best protect the agency’s systems.
• Occasional travel to the other sites within Florida to complete any necessary actions.

Minimum Requirements:

• Four (4) years of information security experience with at least three (3) years responding to security incidents. An associate's degree can substitute for 2 years of the direct experience.
• At least one (1) year leading security projects, efforts, or teams.
• Experience with various regulatory requirements, laws, and security frameworks, such as NIST, ISO 27001, PCI DSS, HIPAA, HITECH, SOX, GDPR, CCPA, CIS, or SOC 2.
• Sufficient experience in the Duties & Responsibilities described above can be considered to satisfy any of the minimum requirements.
• Ability to manage a project, internal/external contractors team, vendors, budget and initiatives.

Preferred Qualifications:

• CISSP, CISM, CCSP, OSCP, CEH/CND, CySA , Sec , or related GIAC certification.
• Experience securing cloud environments like Microsoft Azure, Amazon Web Services, or Google Cloud Platform.
• Experience with firewalls and IAM/PAM systems and vendors.

*** Applicants must complete all fields in the Candidate Profile. Work history

with month and year, hours worked, and formal education are required to

qualify for this position. Responses to Qualifying questions must be verifiable

in the Candidate Profile. Resumes and other documentation can be

attached to provide additional information.***

Preferred Knowledge, Skills and Abilities:

• Knowledge of principles and processes involved in business and organizational planning, coordination, and execution.
• Knowledge of security principles and processes.
• Knowledge of cloud computing and cloud-based infrastructure.
• Knowledge of current trends and the State of Florida security management information systems initiatives.
• Ability to multi-task, prioritize workload, and delegate responsibility.
• Ability to communicate information technology issues effectively with non-technical users.
• Ability to manage large-scale technology projects.
• Ability to manage vendors and team members.
• Ability to manage, lead, direct, coordinate, and supervise the work of staff on security matters.
• Skilled in oral and written communication.
• Provide leadership and motivation.

Benefits of Working for the State of Florida:

Working for the State of Florida is more than a paycheck. The state offers a comprehensive compensation package for employees features a highly competitive set of employee benefits, including:

• Low premium health, dental, vision, life, and supplemental coverage options!
• Paid personal time that includes annual leave, sick leave, nine paid holidays, and one personal holiday!
• Paid administrative leave for mentoring, volunteering, voting, and more!
• Family planning support that includes adoption benefits and paid/unpaid leave options for family and medical responsibilities!
• Retirement plans that include employer contributions (For more information, visit www.myfrs.com)!
• Deferred compensation plans!
• FREE basic life insurance plus additional options for you, your spouse, and children!
• Flexible Spending Accounts!
• Tuition waivers that allow eligible employees to take up to six credit hours per semester, tuition free at any state university or state college!

IMPORTANT NOTICES:

• The Florida Gaming Control Commission has employment restrictions for all commission employees referenced in sections 16.713 and 16.715, Florida Statutes.
• This position requires a Level 2 background screening as a condition of employment and participation in direct deposit. You will be required to provide your Social Security Number (SSN) and/or State Issued Photo Identification in order to conduct this background check.

Applicants are required to apply through the People First system by the closing date, by applying online. All required documentation must be received by the closing date of the advertisement. If you have any questions regarding your application, you may call 1-877-562-7287.

Special Reminders:

Male applicants born on or after October 1, 1962, will not be eligible for hire or promotion unless they are registered with the Selective Services System (SSS) before their 26th birthday, or have a Letter of Registration Exemption from the SSS. For more information, please visit the SSS website: http://www.sss.gov.

If you are a retiree of the Florida Retirement System (FRS), please check with the FRS on how your current benefits will be affected if you are re-employed with the State of Florida. Your current retirement benefits may be canceled, suspended, or deemed ineligible depending upon the date of your retirement.

Our agency participates in the E-Verify System which is a federal government electronic database available for employers to use to verify the identity and employment eligibility of all persons hired to work in the United States.

The Florida Gaming Control Commission is committed to increasing recruitment and hiring of individuals with disabilities and improving employment outcomes.

The State of Florida is an Equal Opportunity Employer/Affirmative Action Employer, and does not tolerate discrimination or violence in the workplace.

Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center (1-866-663-4735). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation.

The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.

VETERANS’ PREFERENCE. Pursuant to Chapter 295, Florida Statutes, candidates eligible for Veterans’ Preference will receive preference in employment for Career Service vacancies and are encouraged to apply. Certain service members may be eligible to receive waivers for postsecondary educational requirements. Candidates claiming Veterans’ Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214 Member Copy #4) along with any other documentation as required by Rule 55A-7, Florida Administrative Code. Veterans’ Preference documentation requirements are available by clicking here. All documentation is due by the close of the vacancy announcement. 

The State of Florida is an Equal Opportunity Employer/Affirmative Action Employer, and does not tolerate discrimination or violence in the workplace.

Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center (1-866-663-4735). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation.

The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.

VETERANS’ PREFERENCE. Pursuant to Chapter 295, Florida Statutes, candidates eligible for Veterans’ Preference will receive preference in employment for Career Service vacancies and are encouraged to apply. Certain service members may be eligible to receive waivers for postsecondary educational requirements. Candidates claiming Veterans’ Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214 Member Copy #4) along with any other documentation as required by Rule 55A-7, Florida Administrative Code. Veterans’ Preference documentation requirements are available by clicking here. All documentation is due by the close of the vacancy announcement.