Please note that applications are currently not accepted through CalOpps or any other third party job board application system. To apply for this position please visit City Information Security Officer (CISO) | Job Details tab | Career Pages.
Our diverse and inclusive workforce of more than 7,000 employees play a key role in the success of San José, the heart of the Silicon Valley. All City of San José employees work together as one team to make San José a vibrant, innovative, and desirable place to live and work. Visit here to learn more about our One Team Leadership Values and Expectations, including quality and excellent customer service and here to learn more about San José.
-
About the Department
The City of San José innovates to provide exceptional civic services using advanced technologies to help our community thrive.
As one of the largest cities in the nation, the City manages a large set of services and assets. The City operates on a budget of $5 billion, with approximately 7,000 employees serving about 1 million residents and 80,000 businesses in the heart of Silicon Valley.
The Information Technology Department’s (ITD) mission is to enrich the quality of life in San José through innovation, collaboration, and engagement. ITD enables that mission through business and infrastructure systems, cybersecurity, data management and analysis, responsible use of Artificial Intelligence (AI), productivity and collaboration tools, the San José 311 resident experience platform, data equity and privacy programs, and strategic planning. San José is powered by truly great people, a robust technology environment, and a strong sense of purpose.
The IT department is a leader in innovation, embracing cutting-edge technologies and pioneering solutions to enhance efficiency and quality of life in San José. As part of this effort, the City leads a national initiative for AI through the GovAI Coalition, which was established to give local governments a voice in shaping the future of AI, ensuring it is developed responsibly for the public good.
Promoting the City’s commitment to equity and inclusion, we believe that all members of the community, regardless of background, have access to the tools and resources needed to thrive in the digital age. San José is located in the heart of Silicon Valley, which boasts a rich history in technology, education, and agriculture. Over half of San José residents speak a language other than English at home, highlighting the importance of language accessibility in all City services. By fostering inclusivity, promoting digital literacy, and building accessible platforms, we are advancing technology while creating a more equitable future for everyone.
At the City of San José, we promote work-life integration and a focus on growth to bring out the best in our people. Come join us in making San José the most vibrant, equitable, sustainable, and innovative city in the nation! Visit the Information Technology Department’s website to learn about our culture, vision, leadership, and innovative initiatives.
Position Duties
NOTE – The first application review will be on Friday, November 1, 2024. Please submit your application by Friday, November 1, 2024, at 12:00 p.m. (PST), if you would like your application to be included in the first review. Candidates who pass the first application review round will be invited to interviews on the week of November 18, 2024.
For more information about the position and duties, please visit the recruitment brochure at this link: https://flipbooks.fleepit.com/f-69425-city_information_security_officer_recruitment_brochure.
The City of San José Information Technology Department seeks an experienced City Information Security Officer (CISO) to lead cybersecurity Citywide initiatives.
The CISO will direct the Cybersecurity Office as the City’s principal executive leader for information and systems security. In partnership with the Chief Information Officer (CIO), they will manage risk identification, protection and compliance, threat detection, incident response (IR), and recovery services for all City departments to ensure business resilience.
The City’s CISO must be able to apply expertise in security strategy, cybersecurity frameworks, managing staff and vendor services, leading incident management, and optimizing resources to achieve desired security outcomes.
Key responsibilities include but not limited to:
- Lead and mentor the Cybersecurity team, offering expertise and support to foster growth and a collaborative environment.
- Collaborate with business units and solution providers to provide optimal security measures and achieve a balance between sustaining business operations and achieving security compliance.
- Coordinate with stakeholders within the City and partners/vendors outside of the City to ensure information and systems meet the City’s standards for threat identification, protection, and risk detection.
- Develop, operationalize, and enhance the City’s cybersecurity strategic plan, programs, policies, and architecture, including vulnerability, risk, and threat management programs through remediation.
- Conduct training programs to educate City personnel on relevant security best practices, foster diligence, and ensure compliance.
- Provide expert security guidance to City departments and officials in service planning, procurements, contract negotiations, vendor management, and project management.
- Provide expert guidance on regulations and standards (FISMA, FedRAMP, CJIS, PCI-DSS, HIPAA, etc.) the City must meet in providing municipal services, as well as security frameworks (NIST, ISO, IEEE, etc.) to shape City operations.
- Oversee and lead incident management/response processes in coordination with City departments to respond and recover from incidents.
- Resolve security-related audits in partnership with City staff.
- Ensure comprehensive security strategies align with resilience plans and emergency management exercises.
- Oversee vendor relationships and manage the City’s procurement and utilization of cybersecurity products and services across departments.
- Lead the annual Cybersecurity Assessment of the City’s technology infrastructure.
- Provide strategic and operational leadership to address cybersecurity in the City’s emerging Internet-of-Things, smart communities, privacy, and equity through data initiatives.
- Collaborate with the Digital Privacy Officer to address privacy challenges emerging from new technologies, including AI.
- Implement governance policies to ensure responsible AI usage across the organization, aligning with ethical standards and risk management protocols.
- Support the GovAI Coalition’s initiatives to promote responsible and safe use of AI in government.
Please note that the City Information Security Officer (CISO) position is currently eligible for a hybrid telework schedule. The schedule for working remotely and onsite is subject to change.
