Job Information- Industry: Technology
- Work Experience: 5+ years
- Salary: $110
- City: Hauppauge
- State/Province: New York
- Country: United States
- Zip/Postal Code: 11788
Job DescriptionClient: Suffolk County Department of Information Technology (DoIT)
Title: Virtual Chief Information Security Officer
Duration: 2 years
Role Overview:As the vCISO for Suffolk County, you will be tasked with developing and managing a comprehensive cybersecurity program. This involves setting policies, conducting risk assessments, and providing strategic guidance on cybersecurity matters.
Key Responsibilities:- Align the cybersecurity program with the NIST Cybersecurity Framework.
- Develop policies, procedures, and guidelines to ensure adherence to cybersecurity standards.
- Perform cybersecurity gap analyses and develop strategic plans to mitigate risks.
- Establish and maintain an Enterprise IT Security Strategic Plan.
- Review and develop IT security policies and procedures, including incident management and escalation protocols.
- Establish configuration standards and monitor compliance.
- Lead the development of a Cyber Incident Response Plan.
- Oversee Disaster Recovery/Continuity of Operations Planning (DR/COOP).
- Evaluate third-party vendors for security compliance.
- Ensure vendor risk management practices are robust and effective.
- Develop a roadmap for implementing security controls and initiatives.
- Design and deliver security awareness training programs for County employees.
Technical Security Evaluations:Oversee vulnerability assessments, penetration testing, and enterprise application security evaluations.Prepare and present regular reports on the County's cybersecurity posture.Ensure compliance with risk management frameworks and audit requirements.
Qualifications:Experience: Minimum 15 years in information security, with project management experience.
Certifications: CISSP (Certified Information Systems Security Professional) and CISA (Certified Information Systems Auditor) certifications are required.Experience in municipal or state government cybersecurity programs is preferred.Skills: Strong leadership and communication skills to engage with executive stakeholders and technical teams effectively.
Employment: Must be US-based, a US citizen, and a full-time employee of the vendor.This role demands a seasoned cybersecurity professional capable of not only technical leadership but also strategic oversight and compliance management within the unique context of public sector cybersecurity.If you are bright, motivated, skilled, a difference-maker, able to get things done, work with minimum direction, enthusiastic, a thinker, able to juggle and multi-task, communicate effectively, and lead, then we would like to hear from you. We need exceptionally capable people for this role for our client, so get back to us and tell us why you think you are a fit.
About Us:Tri-Force is one of the fastest growing companies in Philadelphia region by receiving the award 5 times and 3 times(Ranked #931 2021) on Inc. 5000 fastest growing companies in the USA. Tri-Force Consulting Services, Inc. is an established consulting services firm offering innovative solutions to Government and Commercial sectors. We specialize in building customized software applications solutions such as knowledge management systems, business intelligence, data analysis, database support and maintenance, data warehouse implementation and support, systems architecture and systems integration for our clients. Our technical competencies are in Java, .NET, SharePoint, PHP, Business Intelligence (Cognos, Data Warehouse), mobile applications platforms (iPhone, iPad, Android, Blackberry), and various other technologies. We also specialize in providing resources to manage infrastructure projects. Tri-Force is one of the fastest growing companies in the Philadelphia region by receiving the award 6 times and 4 times on Inc. 5000 fastest growing companies in the USA.#J-18808-Ljbffr
