San Diego County Water Authority Hiring for Information Security Manager Job at Kearny Mesa Full Time

JOB

JOIN THE SAN DIEGO COUNTY WATER AUTHORITY! The San Diego County Water Authority is an independent public agency that serves as San Diego County’s regional water wholesaler. The mission of the Water Authority is to provide a safe and reliable water supply to its 24 member agencies serving the region’s $240 billion economy and 3.3 million residents.The Water Authority is executing a long-term strategy to diversify the region’s supplies, make major investments in the region’s water delivery and storage system, and improve water use efficiency. Through dynamic leadership, thoughtful planning, and prudent fiscal policies, the Water Authority is cost effectively managing the region’s water portfolio, while continuing to diversify supplies to enhance current and future reliability.The Administrative Services DepartmentThe Administrative Services Department provides services that support the efficient operations of the Water Authority. Responsibilities include risk management, procurement and administration of the Water Authority’s business insurance (including claims management), development of policies and procedures, purchasing and regulatory compliance, procurement support for solicitation and contracts, cybersecurity for the business network, maintenance of critical computer software applications, maintenance and development of websites and online dashboards, acquisition and maintenance of computer hardware and cloud services, maintenance and development of Geographical Information Systems (GIS) datasets, audio and visual support for conference rooms and the Board room, administration of the records management program, management of the front desk reception, safety and risk management (including business insurance) and facility management for the Kearny Mesa building and grounds.The Information Security GroupThe Information Security group, also known as the cybersecurity group, protects the Water Authority’s critical information systems against cyber threats by designing and executing a comprehensive information security program that manages multiple levels of active and passive technical defenses, identifying and neutralizing threats, assessing and remediating vulnerabilities, developing and enforcing effective security-related policies and procedures, conducting effective staff outreach and training, and creating and practicing incident response plans.The Ideal CandidateThe Administrative Services Department is currently searching for a highly driven, focused, team-oriented individual with proven leadership skills in a dynamic, fast-paced environment. The ideal candidate will have experience managing programs, establishing and maintaining project and production schedules, and coordinating with management and staff to identify and assess critical information security needs. The ideal candidate is an experienced cybersecurity leader with the ability to identify information security issues and opportunities to protect critical systems and sensitive information against cyber threats. In addition, the ideal candidate will: Possess the ability to plan, organize, integrate and manage information security systems development, installation, configuration, operation and administration consistent with accepted industry frameworks and best practices such as ISO 27001, NIST and/or CIS.Analyze problems and alternatives; develop sound conclusions; and make recommendations that reflect both security best practices and user department technology requirements.Maintain confidentiality in regard to sensitive information and security practices.Set priorities and allocate resources to most effectively meet needs in a timely manner.Evaluate programs and complex technology and strategies. Make sound, prudent recommendations that maximize return on investment.Develop and implement appropriate security procedures and controls. Successfully audit security-related policies and practices to ensure proper implementation and compliance. Prepare clear, concise and accurate reports and other materials. Communicate effectively orally and in writing.Inspire and motivate cross-functional, interdisciplinary teams; manage performance and develop skills/abilities of direct reports; educate, collaborate with and train people possessing differing levels of technical knowledge.Effectively manage negotiations and contracts with vendors and consultants. Establish and maintain effective working relationships with all levels of Authority management, employees, vendors, Board members, member agency staff and others encountered in the course of work.

EXAMPLE OF DUTIES

The Information Security Manager is a senior-level manager who, under general direction plans, organizes, and directs the vision and the strategies necessary to ensure the integrity, availability and protection of the Water Authority’s electronic data, Business System and Aqueduct Control System components. The Information Security Manager identifies and communicates risk to senior management; creates, maintains and enforces effective policies and supporting processes; and ensures compliance with legal and regulatory requirements. Distinguishing CharacteristicsThis single position class is responsible for ensuring the Water Authority has an effective and integrated approach to protecting the Water Authority’s critical data and information systems responsible for running the day-to-day business operations and water infrastructure. This position performs high-level strategic work, analysis and communications independently, and it coordinates and collaborates with other managers and supervisors to ensure staff is carrying out necessary technical work in the respective departments. Assignments are typically received in the form of general instructions and objectives from the Director of Administrative Services, and work is reviewed through conferences, report analysis and program results.This is an at-will senior-management level position and serves at the pleasure of the Water Authority.Representative DutiesThe duties listed below are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related or a logical assignment to this class. Direct and design security strategies, systems and controls for the Business System. Provide counsel and technical assistance as needed to Operations Technology staff who operate and maintain the Aqueduct Control System; evaluate the threat landscape and propose new or changed security strategies, policies and practices as needed.Develop cyber incident response plans and manage incident response efforts; coordinate with Information Systems Manager and SCADA Supervisor as needed to ensure that disaster recovery/business continuity plans are in place and tested.Oversee review, selection, configuration and installation of security products.Ensure information and cyber security policies and procedures are being properly implemented and enforced; schedule periodic information security audits, review their findings, and oversee remediation of identified vulnerabilities.Serve as the organization’s primary representative on cybersecurity matters to internal and external stakeholders and security-related consultants.Create and communicate security objectives and key performance indicators; provide clear and understandable presentations and reports on security matters to management and Board members; provide training and mentoring to Information Systems or SCADA-related Operations & Maintenance staff; manage general employee security awareness outreach and training programs.Serve as liaison to member agencies, law enforcement, homeland security or other external partners and stakeholders; manage security-related consultant contracts as needed.Maintain current understanding of fast-changing information technology and operational technology threats; evaluate potential relevance and impact of emerging threats to the Water Authority and its member agencies.Ensure ongoing compliance of cyber and information security policies with applicable laws and regulations.Maintains current knowledge of advancements in information systems and computing technologies and their capabilities; provides technical information, guidance and support to other departments as needed.Manages assigned budgets; coordinates and tracks project expenditures to ensure resources are used efficiently and within budget.Prepares reports, correspondence and memoranda for the Board, management and other executive staff.Manages Information Security staff (2); develops work plans, evaluates performance, motivates and supports their growth and development.For further details regarding the duties and responsibilities, and qualification guidelines for this class specification, please click on the following link: Information Security ManagerOptional Hybrid Work Schedule: The Water Authority has embraced a hybrid work schedule to offer employees flexibility and work-life balance. This position will be eligible to work remotely with occasional on-site work depending on operational needs. Employees authorized to work remotely must be able to report to Water Authority facilities as needed. Additionally, employees assigned to work at the Kearny Mesa office work a 9/80 schedule, where the entire facility is closed every other Friday.

MINIMUM QUALIFICATIONS

The qualification guidelines generally describe the knowledge and ability required to enter the job in order to successfully perform the assigned duties. Any combination of experience and training that would provide the required knowledge, skills and abilities will be considered. Bachelor’s degree from a college or university in computer science, information security, information assurance, management information systems or a closely related field; and seven years of progressively responsible experience in the design, programming, installation and maintenance of information systems software and hardware, networking infrastructure, operating systems, application software development, project management, regulatory compliance, risk management and providing training; five years of that experience in the information security field; at least three years of that experience spent at a project management or supervisory level.Licenses and Other RequirementsAt least two current information security-related professional certifications (such as Certified Information Security Systems Professional, Certified Information Security Manager, Global Information Assurance Certification, Certified in Risk and Information Systems Control, or equivalent) are required.

SUPPLEMENTAL INFORMATION

To be considered for this position, please submit an employment application and supplemental questionnaire by Sunday, February 12, 2023, at 11:59 p.m. Resumes will not be accepted in lieu of a completed application and supplemental questionnaire. All applications and supplemental questionnaires will be evaluated in relation to the criteria outlined in this job announcement. The selection process may consist of an appraisal interview, writing exercise, and/or other appropriate screening devices. Tentative Exam Schedule Application Deadline: February 12, 2023Interviews: Tentatively Scheduled for March 1, 2023 To ensure timely and successful navigation, please consider applying early if you are new to the governmentjobs.com application system. For technical assistance with the online application system, please review the Government Jobs online application guide, or contact their toll-free applicant support line at (855) 524-5627. If you have questions regarding the position, please contact Patricia Duran, Human Resources Analyst, at (858) 522-6663. The San Diego County Water Authority is an Equal Opportunity Employer and does not discriminate against any person on the basis of race, color, religion, sex (including pregnancy status), gender, gender identity and/or expression, sexual orientation, marital status, age, genetic information, mental or physical disability (whether perceived or actual), ancestry, military or veteran status, citizenship status, medical condition, and/or national origin. Should you have any questions regarding the recruitment process or require accommodations pursuant to the Americans with Disabilities Act, please contact Patricia Duran, Human Resources Analyst, at (858) 522-6663.