· Provide information security expertise and recommendations to Chief Information Office (CIO) management, New York State Local Retirement System (NYSLRS) management, Office of the State Comptroller (OSC) business units and technical teams in support of information security initiatives.

· Assist with providing direction and guidance on developing, deploying, and maintaining information security solutions.

· Coordinate the implementation of information security procedures and processes, risk management and remediation activities, as well as monitoring and reporting for compliance.

· Ensure security safeguards are in place and working as intended.

· Maintain security documentation required to obtain and maintain Authorization to Operate.

· Ensure that all security policies, standards, and directives are upheld and maintained for NYSLRS systems.

· Assist with the development and implementation of plans to mature NYSLRS information security risk analysis and management processes.

· Collaborate with NYSLRS business units to detect and prevent fraud.

· Maintain NYSLRS Security Risk Register.

· Assist with coordinating vulnerability scanning and analysis to identify risk; prioritize, document and track remediation efforts.

· Assist with overseeing any third-party vendor who performs security vulnerability assessments.

· Participate in collection of data for investigative purposes.

· Assist with reviewing documents including, but not limited to, NYSLRS contracts, service level agreements, and requirements. Ensure documents are in alignment with OSC policies and standards.

· Monitor and evaluate information security and risk management trends, tools, and techniques to maintain awareness applicable to NYSLRS.

· Develop a multilayered and adaptive approach to counter information security threats.

· Develop and implement security control audit plans.

· Assist team members with improving monitoring and detection capabilities.

· Manage staff activities to ensure NYSLRS Redesign Security Unit duties are performed in a timely and accurate manner according to established priorities and division goals/strategies.

· Communicate objectives and expectations, allocating resources, assigning tasks/projects, reviewing progress/deliverables, and providing constructive feedback.

· Perform the full range of supervisory responsibilities including, but not limited to, development and completion of comprehensive performance evaluations and review of timesheets and telecommuting journals.

· Develop training plans and provide staff with training opportunities including, but not limited to on-the-job training, vendor sponsored events and formal outside training.

· Facilitate knowledge transfer across the team.

· Promote collaboration within the organization.

· Handle personnel and performance issues timely and with discretion.

· Ensure participation in and completion of OSC’s mandatory training courses and ensure completion is documented for auditing purposes.

· Understand and ensure the adherence to all agency policies and standards.

· Inform management of progress, issues, and risks that could affect the completion of objectives, as well as requests outside of assigned duties.

· Collaborate with OSC business units to keep them informed of key security activities.

· Inform management of projects and work activities.

· Support security program activities.

Knowledge, Skills, and Abilities:

· One year of experience supporting an Oracle PeopleSoft System as a System Administrator, Security Administrator or Developer.

· Working knowledge of:

· Information Security (CIA triad, Information Classification, Risk Management).

· Information Security Frameworks (NIST Cyber Security Framework, CIS Controls).

· Vulnerability Management.

· Demonstrated experience with auditing and monitoring solutions.

· Proficient in Microsoft Excel and SQL Developer.

· Demonstrated critical thinking, problem solving and analytical skills.

· Demonstrated skills in facilitating meetings, listening, and negotiating between multiple stakeholders to drive results.

· Excellent verbal and written communication skills including the ability to clearly articulate information technology and information security concepts that allow the business and management to make informed decisions.

· Ability to maintain confidentiality.

Telecommuting:

The Office of the New York State Comptroller (OSC) supports telecommuting where it is reasonable to do so based upon the agency’s mission and operational needs. Generally, employees new to OSC will be restricted from telecommuting for at least 8 calendar weeks. After the initial 8 calendar week restriction, if an employee’s duties and work performance are aligned with telecommuting they may be allowed to do so. Upon approval to telecommute, OSC employees may telecommute for up to 5 days per pay period.

Non-competitive Qualifications:

Bachelor’s degree* in Information Security, Cyber Security, Digital Forensics, Information Assurance, or Information Technology related field, OR bachelor's degree with 15 credit hours in Cyber Security, Information Assurance, or Informational Technology AND three years of information technology experience, including two years of information security or information assurance experience.**

* Bachelor’s degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor’s degree on a year-for-year basis; an associate degree requires an additional two years of information technology, information security, or information assurance experience.

**Experience solely in information security or information assurance may substitute for the general information technology experience.

How to Apply: Submit a clear, concise cover letter, resume, and a completed copy of this template: https://www.osc.ny.gov/files/Jobs/docs/00497-information-technology-specialist-4-info-sec-mq-template-1-2024.docx via email to recruit@osc.ny.gov no later than February 9, 2024. Documents must be sent as unlocked and accessible attachments.

Reference Item #00497 - DLC in the subject line of your email and on your cover letter for proper routing.

If you have questions about this vacancy, please contact this Division representative:

Division contact: Lisamarie Astarita, CIO_HR@osc.ny.gov

Important Notes: To access the required template, copy the link above and paste it into your web browser, then download, complete, and save to submit with your email response. You MUST complete the linked template in full to demonstrate you meet the minimum qualifications for this position. Interview selection is based SOLELY on the information you provide in this document, incomplete or vague information will not be viewed in your favor.

Be sure to submit an unofficial copy of any transcripts you may have with your cover letter, resume, and completed template, as there are educational requirements for this position.

Job Type: Full-time

Pay: $90,804.00 - $114,444.00 per year

Benefits:

• Dental insurance
• Employee assistance program
• Flexible spending account
• Health insurance
• Health savings account
• Paid time off
• Retirement plan
• Tuition reimbursement
• Vision insurance

Experience level:

• 3 years

Schedule:

• Monday to Friday

Work Location: Hybrid remote in Albany, NY 12236