Information Technology Specialist 3 Information Security - 9229

The duties that the incumbent of the vacancy will be expected to perform. Duties Description ITS provides operational support to state agencies on a 24x7x365 basis; some positions may be required to provide this critical service at any time.ITS provides operational support to state agencies on a 24x7x365 basis; some positions may be required to provide this critical service at any time.Under the direction of a Senior Information Security Analyst, ITS 4 [SG 25], or higher, within the Dedicated Support team, Department of Labor Portfolio, the Senior Information Security Analyst will serve in the role as themember providing in-depth information security consulting and services aligned with business needs of the client agencies to ensure confidentiality, integrity, and availability of information and systems. The position requires communicating orally and in writing with various individuals including management, users, vendors, and other IT staff. The incumbent will have to work with ITS teams and upper-level agency management to resolve technically complex and politically sensitive issues under pressure. The position may require availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.Specific duties include, but are not limited to: • Implements information security and compliance programs.• Assists with management and resolution of security threats to agency information systems.• Serves as information security expert and evaluates systems and contracts for alignment with agency and State information security policies.• Monitors and stays aware of information security industry trends, tools, and techniques.• May supervise staff and resources dedicated to the Security Services Teams.• Performs additional duties as required.Preferred Qualifications: • Applicable Information Security or Information Technology certificate(s) such as Security , Network , GSEC, etc.• Knowledge or Experience in one or more of the following areas: o applying and implementing network, system, or application securityo security policy/standard/guideline development, implementation, or interpretationo conducting risk assessments and evaluating information technology systems for security controls (SSDLC)o information security incident response• Excellent oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding• Demonstrated critical thinking, problem solving and analytical skills• 1 years’ experience in the following areas: o developing metrics and key performance indicators o process development and process improvement o interpreting and implementing IRS Federal Tax Information safeguards

The minimum qualifications required for this vacancy. Minimum Qualifications Bachelor’s degree* with at least 15 credit hours in cyber security, information assurance, or information technology; and two years of information technology experience, including one year of information security or information assurance experience**.* Substitution: bachelor’s degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor’s degree on a year-for-year basis; an associate’s degree requires an additional two years of general information technology experience.** Experience solely in information security or information assurance may substitute for the general information technology experience.Preferred qualifications: The ideal candidate would possess one or more of the following preferred qualifications: • Certifications in one or more of the following: • Cyber Defense (e.g., GCIA, GCIH, GCED, GSOM, GSOC, GMON, GCDA)• Cyber Threat Intelligence (e.g., GCTI, CTIA, CCIP, GOSI)• Information Security Management (e.g., CISSP, CISM, CCISO)• 1 years’ experience in one or more of the following: • Working as a SOC analyst• Conducting log analysis (e.g., firewall logs, DNS logs, proxy logs, IDS/IPS logs)• Using SIEM technologies to support in-depth investigations• Participating in cyber incident response• Strong understanding of enterprise IT environments, including but not limited to system administration, network architecture, operating systems, endpoint detection and response tools, and network-based security solutions (e.g., IDS/IPS, firewalls).• Strong understanding of the foundations of Information Security, such as the CIA triad, information classification, identity and access management, risk management, vulnerability management, secure architecture and engineering, network security, software development security, etc.• Excellent oral and written communication skills including the ability to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding.• Demonstrated critical thinking, problem solving and analytical skills.

Additional comments regarding the vacancy. Additional Comments Some positions may require fingerprinting. Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview. Positions located in New York City, will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.For the duration of the NY HELPS Program, this title maybe filled via a non- competitive appointment, which means no examination is required but all candidates must meet the minimum qualifications of the title for which they apply. At this time, agencies may recruit and hire employees by making temporary appointments. In May 2024, if a temporary NY HELPS employee is satisfactorily performing in the position, the appointment will be changed from temporary pending Civil Service Commission Action to permanent non-competitive and the official probationary period will begin.At a future date (within one year of permanent appointment), it is expected employees hired under NY HELPS will have their non-competitive employment status converted to competitive status, without having to compete in an examination. Employees will then be afforded with all of the same rights and privileges of competitive class employees of New York State. While serving permanently in a NY HELPS title, employees may take part in any promotion examination for which they are qualified.Benefits of Working for NYS Generous benefits package, worth 65% of salary, including: Holiday & Paid Time Off• Thirteen (13) paid holidays annually• Up to Thirteen (13) days of paid vacation leave annually• Up to Five (5) days of paid personal leave annually• Up to Thirteen (13) days of paid sick leave annually for PEF.• Up to three (3) days of professional leave annually to participate in professional developmentHealth Care Benefits• Eligible employees and dependents can pick from a variety of affordable health insurance programs• Family dental and vision benefits at no additional costAdditional Benefits• New York State Employees’ Retirement System (ERS) Membership• NYS Deferred Compensation• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds• Public Service Loan Forgiveness (PSLF)• And many more.The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.

Some positions may require additional credentials or a background check to verify your identity.