Search Jobs

Please note that applications are currently not accepted through CalOpps or any other third party job board application system. To apply for this position please visit City Information Security Officer (CISO) | Job Details tab | Career Pages.

 

Our diverse and inclusive workforce of more than 7,000 employees play a key role in the success of San José, the heart of the Silicon Valley. All City of San José employees work together as one team to make San José a vibrant, innovative, and desirable place to live and work. Visit here to learn more about our One Team Leadership Values and Expectations, including quality and excellent customer service and here to learn more about San José.

About the Department

The City of San José innovates to provide exceptional civic services using advanced technologies to help our community thrive.
 
As one of the largest cities in the nation, the City manages a large set of services and assets. The City operates on a budget of $5 billion, with approximately 7,000 employees serving about 1 million residents and 80,000 businesses in the heart of Silicon Valley.
 
The Information Technology Department’s (ITD) mission is to enrich the quality of life in San José through innovation, collaboration, and engagement. ITD enables that mission through business and infrastructure systems, cybersecurity, data management and analysis, responsible use of Artificial Intelligence (AI), productivity and collaboration tools, the San José 311 resident experience platform, data equity and privacy programs, and strategic planning. San José is powered by truly great people, a robust technology environment, and a strong sense of purpose.

The IT department is a leader in innovation, embracing cutting-edge technologies and pioneering solutions to enhance efficiency and quality of life in San José. As part of this effort, the City leads a national initiative for AI through the GovAI Coalition, which was established to give local governments a voice in shaping the future of AI, ensuring it is developed responsibly for the public good.
 
Promoting the City’s commitment to equity and inclusion, we believe that all members of the community, regardless of background, have access to the tools and resources needed to thrive in the digital age. San José is located in the heart of Silicon Valley, which boasts a rich history in technology, education, and agriculture. Over half of San José residents speak a language other than English at home, highlighting the importance of language accessibility in all City services. By fostering inclusivity, promoting digital literacy, and building accessible platforms, we are advancing technology while creating a more equitable future for everyone.
 
At the City of San José, we promote work-life integration and a focus on growth to bring out the best in our people. Come join us in making San José the most vibrant, equitable, sustainable, and innovative city in the nation! Visit the Information Technology Department’s website to learn about our culture, vision, leadership, and innovative initiatives.

Position Duties

NOTE – The first application review will be on Friday, November 1, 2024. Please submit your application by Friday, November 1, 2024, at 12:00 p.m. (PST), if you would like your application to be included in the first review. Candidates who pass the first application review round will be invited to interviews on the week of November 18, 2024.

For more information about the position and duties, please visit the recruitment brochure at this link: https://flipbooks.fleepit.com/f-69425-city_information_security_officer_recruitment_brochure. 
 
The City of San José Information Technology Department seeks an experienced City Information Security Officer (CISO) to lead cybersecurity Citywide initiatives.
 
The CISO will direct the Cybersecurity Office as the City’s principal executive leader for information and systems security. In partnership with the Chief Information Officer (CIO), they will manage risk identification, protection and compliance, threat detection, incident response (IR), and recovery services for all City departments to ensure business resilience.
 
The City’s CISO must be able to apply expertise in security strategy, cybersecurity frameworks, managing staff and vendor services, leading incident management, and optimizing resources to achieve desired security outcomes.
 
Key responsibilities include but not limited to:

• Lead and mentor the Cybersecurity team, offering expertise and support to foster growth and a collaborative environment. 
• Collaborate with business units and solution providers to provide optimal security measures and achieve a balance between sustaining business operations and achieving security compliance.
• Coordinate with stakeholders within the City and partners/vendors outside of the City to ensure information and systems meet the City’s standards for threat identification, protection, and risk detection.
• Develop, operationalize, and enhance the City’s cybersecurity strategic plan, programs, policies, and architecture, including vulnerability, risk, and threat management programs through remediation.
• Conduct training programs to educate City personnel on relevant security best practices, foster diligence, and ensure compliance.
• Provide expert security guidance to City departments and officials in service planning, procurements, contract negotiations, vendor management, and project management.
• Provide expert guidance on regulations and standards (FISMA, FedRAMP, CJIS, PCI-DSS, HIPAA, etc.) the City must meet in providing municipal services, as well as security frameworks (NIST, ISO, IEEE, etc.) to shape City operations.
• Oversee and lead incident management/response processes in coordination with City departments to respond and recover from incidents.
• Resolve security-related audits in partnership with City staff.
• Ensure comprehensive security strategies align with resilience plans and emergency management exercises.
• Oversee vendor relationships and manage the City’s procurement and utilization of cybersecurity products and services across departments.
• Lead the annual Cybersecurity Assessment of the City’s technology infrastructure.
• Provide strategic and operational leadership to address cybersecurity in the City’s emerging Internet-of-Things, smart communities, privacy, and equity through data initiatives. 
• Collaborate with the Digital Privacy Officer to address privacy challenges emerging from new technologies, including AI. 
• Implement governance policies to ensure responsible AI usage across the organization, aligning with ethical standards and risk management protocols. 
• Support the GovAI Coalition’s initiatives to promote responsible and safe use of AI in government. 

Please note that the City Information Security Officer (CISO) position is currently eligible for a hybrid telework schedule. The schedule for working remotely and onsite is subject to change.

The City of San José is a place where we use civic technology to help our community thrive.

As the 10th largest city in the nation, the City manages a large set of services and assets. The City operates on a budget of $5 billion, with 7,000 employees serving 1+ million residents and 80,000 businesses in the heart of Silicon Valley.

Information Technology's (IT) mission: Put powerful tools and information in the hands of people to unleash their brilliance in service to our community. IT enables that mission through business and infrastructure systems, cybersecurity, data management and analysis, productivity and collaboration tools, the San Jose 311 resident experience platform, data equity and privacy programs, and strategic planning. San Jose is powered by truly great people, a robust technology environment, and a strong sense of purpose.

We promote work-life integration and a focus on growth to bring out the best in our people. Come join us in making San Jose the most vibrant, equitable, sustainable, and innovative city in America!

You can visit the Information Technology Department website to learn more about us.
NOTE - The first review of applications will be on Monday, August 5, 2024. Please submit your application by 11:59 p.m. (PST) on Friday, August 2, 2024, if you would like your application to be included in the first review. Candidates who pass the first application review round will be invited to interviews on the week of August 12, 2024.

The City of San José Information Technology Department (ITD) seeks a Cybersecurity Analyst (Enterprise Supervising Technology Analyst) to support new and existing initiatives in the Cybersecurity Office. The position will focus on Risk Mitigation as well as Identity & Access Management with exposure and support on all aspects of the Cybersecurity practice, including cross-support.

The ideal candidate will be part of one of the largest, most innovative communities in the nation. Led by the City Information Security Officer (CISO), the Cybersecurity Analyst will implement and manage information and system security programs across the City that keep municipal services secure and resilient. The Cybersecurity Analysts will support the CISO and the City by administering risk identification, protection and compliance, threat detection, incident response, and recovery services for all City departments to achieve business resilience.

The City of San José requires Cybersecurity Analysts to be highly skilled and adapt quickly to deal with emerging challenges. The candidate must be able to apply expertise in all aspects of security, interface with vendors, keep their skills current, manage security projects, and provide security services to City departments with strong outcomes.

Key responsibilities include but are not limited to the following:

• Building and maintaining a robust Identity and Access Management program with the following characteristics:
  • Auditing and Reporting
  • Role-based Access Control
  • Single Sign-On
  • Federation
  • Identity Lifecycle (Workflow management)
  • Privileged Identity Management
  • Provisioning
  • Compliance
  • Policy Management
• Defining, planning, and executing security-related projects from beginning to end.
• Managing vendors to execute tasks on demand or as part of a project.
• Building and managing a strong vulnerability management program. The ideal candidate will have hands-on experience with vulnerability management tools and a strong technical understanding and experience assessing vulnerabilities and identifying weaknesses in multiple operating system platforms, databases, and application servers.
• Building and managing a strong IT asset management program. The ideal candidate will have a strong background in maintaining IT asset inventories, software, hardware, and logical inventory of systems.
• Identifying and mitigating threats utilizing existing technologies. Working with other teams to mitigate identified vulnerabilities from identification to closure. Tracking and reporting mitigation efforts. Be familiar with the Plan of Action and Milestones in tracking, remediating, socializing, and getting them to completion.
• Working with other teams preparing, detecting, eradicating, and restoring operations in the event of incidents.
• Managing Plan of Action and Milestones for existing vulnerabilities
• Working with relevant teams to ensure the restoration of systems and technologies in accordance with policy and based on business group needs.
• Interfacing with the Virtual Security Operations Center (V-SOC) and using deployed tools and services to ensure system and network monitoring is taking place in accordance with defined service levels, contracts, and established standards.
• This role requires flexibility and adaptability to meet the Security needs of the ITD. The individual must be able to support other areas of expertise within the security domain, such as but not limited to NIST Cybersecurity Framework implementation, Identity Access Management, Risk Management & Compliance, Risk Assessments, Training, Audit Support, and others.

Please note that the Cybersecurity Analyst (Enterprise Supervising Technology Analyst) position is currently eligible for a hybrid telework schedule. The schedule for working remotely and onsite is subject to change.

Salary Information: The final candidate's qualifications and experience shall determine the actual salary. In addition to the starting salary, employees in the Enterprise Supervising Technology Analyst (ESTA) classification shall also receive an approximate five percent (5%) ongoing non-pensionable compensation pay.

• Salary Range (including the 5% NPWI): $141,697.92 - $172,645.20

The ESTA classification is represented by the City Association of Management Personnel (CAMP) bargaining unit.

Please note: This is an extension of an existing advertisement.  If you have already applied, you do not need to re-apply.

The City of Lincoln is hiring an Application Integrator I/II/Senior in the Information Technology/Geographic Information Systems Department.  Please note this is not a remote position. 

• Application Integrator I: $6,112.47-$8,191.29
• Application Integrator II: $6,739.00-$9,030.91
• Application Integrator Senior: $7,429.75-$9,956.58

DEFINITION:

Under direction, plans, configures/develops, and manages information technology-related projects involving critical applications, large systems, databases, and sophisticated processes; provides team leadership, guidance, business, and technical expertise on assigned projects involving citywide computer systems; designs and/or creates database structures and data migration/conversion techniques for system(s) conversions or upgrades. Monitors and tunes databases to obtain optimum performance; creates and develops reports; applies analytical and advanced design techniques in developing and/or modifying new programs and/or systems; codes, configures and/or tests programs, and resolves related problems in large, complex systems; provides technical guidance to lower-level IT personnel and contractors through training, mentoring, and coaching. Performs other related duties as assigned.

DISTINGUISHING CHARACTERISTICS:

Application Integrator I

The Application Integrator I is the entry level class in this series and performs the more routine tasks associated with database and application projects. This classification may be alternatively staffed with the Application Integrator II, and incumbents may advance to the higher level after gaining experience and demonstrating a level of proficiency that meets the qualifications of the higher-level class.

Application Integrator II

The Application Integrator II is the journey level class responsible for the full range of duties associated with database and application projects. This classification is distinguished from the next higher classification of Senior Application Integrator in that the latter is an advanced journey level, performs the most complex assignments, and may have lead responsibilities.

Senior Application Integrator

The Senior Application Integrator is the advanced journey level and/or lead class responsible for a wide variety of complex database and application projects. Positions at this level are distinguished from other classes within the series by the level of responsibility assumed, complexity of duties assigned, independence of action taken, and by the amount of time spent performing the duties.

SUPERVISION RECEIVED/EXERCISED:

Application Integrator I

Receives direct supervision from the Chief Innovation and Technology Officer. Incumbents of this class do not routinely exercise supervision.

Application Integrator II

Receives supervision from the Chief Innovation and Technology Officer. Incumbents of this class do not routinely exercise supervision.

Senior Application Integrator

Receives general direction from the Chief Innovation and Technology Officer or his/her designee. May exercise technical and functional supervision over assigned staff.

ESSENTIAL FUNCTIONS: (include but are not limited to the following)

• Perform complex work related to database management and administration, including designing, configuring, and implementing databases infrastructure architecture, backup and recovery planning implementation, integrations, overseeing disk capacity of server and database infrastructure, and monitoring performance of assigned databases and servers; modifying and upgrading existing databases; coordinating, developing, and performing data export and import routines between applications; and creating and modifying query language scripts.
• Perform complex work related to application development, configuration, integration and administration, including designing, developing, overseeing, and implementing application and integration architecture; backup and recovery planning; and implementation, integration, performance monitoring, data analysis, modifying and upgrading existing solutions, creating and modifying applications utilizing programming languages including but not limited to HTML, JavaScript, PowerShell, JSON, SQL, and Python.
• Coordinates and monitors information technology operational systems for the City, including analyzing, diagnosing, maintaining, and troubleshooting assigned system areas, such as applications, operating systems, and database systems.
• Researches available technologies; assists in the development and administration of Requests for Proposal to acquire applicable departmental programs or systems from vendors in order to meet the identified needs; performs cost/benefit analyses of said systems; manages and executes installation upgrades and system patches; tracks problems and requests for system enhancement and equipment upgrades; identifies and recommends solutions related to the assigned program; and resolves problems as they occur.
• Assists with and performs installation of new and existing software, complex configuration duties, and related data migration, conversion, maintenance, and extraction work; performs modifications, testing, and implementation of vendor software; develops, coordinates, and implements plans to test business and functional processes during system development and quality assurance; participates in the design of all required system interfaces and reviews and monitors vendors’ work.
• Serves as a trainer for staff regarding new procedures and software applications; demonstrates the software application systems; prepares written procedures and training materials for staff; provides support for specific department applications; tests programs and applications from users’ perspective.
• Conducts systems analyses; develops business and technical requirements; designs functional and technical specifications, writes source code, and tests applications.
• Assists in the planning and coordination of migrations from legacy systems and the implementation of ongoing maintenance of new computer systems.
• Lead and manage complex projects involving multiple City departments.
• Acts as a technical resource for City staff; identifies and suggests alternatives and recommends process changes through information systems; assists in identifying potential required changes to business processes and/or procedures.
• Participates in defining requirements, development, design, and validation of new automated computer systems.
• Develops and runs custom reports using a variety of report applications and systems.
• Designs, writes, tests, and documents a variety of computer programs/report-writers using applicable programming languages.
• Prepares and maintains documentation and instruction; maintains and updates manuals, codebooks, templates, web pages, and related documents; follows recommended protocols and procedures.
• Creates and maintains users, user permissions, system privileges, passwords and other administrative tasks for assigned systems; monitors, logs, and files for evidence of problems and system issues; performs necessary backup/recovery activities at scheduled times.

PHYSICAL, MENTAL AND ENVIRONMENTAL WORKING CONDITIONS:

Position requires prolonged sitting, standing, walking, reaching, twisting, turning, kneeling, bending, squatting and stooping in the performance of daily activities.  The position also requires grasping, repetitive hand movement and fine coordination in keeping records and preparing reports using a computer keyboard.  Additionally, the position requires near and far vision in reading written reports and work-related documents and acute hearing is required when providing phone and personal service.  The nature of the work may require the incumbent to lift equipment and materials weighing up to 25 pounds or more.

KNOWLEDGE/SKILLS/ABILITIES: (The following are a representative sample of the KSAs necessary to perform essential duties of the position.  The level and scope of the knowledge and abilities listed below vary between the I, II, and Senior levels.)

Knowledge of:

Advanced principles and practices of information technology systems, systems analysis, programming, design, and application documentation; current computer industry technology practices and trends, including system development and administration; principles and practices of systems analysis and programming; data import and export routines, and report writing applications; project management methodologies; principles and practices of business systems and workflow analysis; common application programming languages; standards and protocols for data communications and methodologies for database management; PC operations and networks; principles, practices, techniques and methods of LAN applications and operations; computer hardware, software, major operating systems and data communications; Microsoft database applications, Excel, and MS Office; troubleshooting techniques used in resolving operational problems with computer software; pertinent local, state, and federal laws, ordinances and rules; proper English, spelling, and grammar; occupational hazards and standard safety practices.

Skill to:

Operate an office computer and a variety of word processing and software applications.

Ability to:

Analyze requirements and procedures to determine the technical database requirements of applications analysts and users; effectively work with City employees from multiple departments, contract employees, and outside vendors to complete information technology projects; conduct analyses of alternatives; develop and review a technical support plan; write computer programs in accordance with established standards and practices; maintain and update highly technical and complex manuals, codebooks, and computer control tables; prepare and maintain documentation for systems procedures, such as network applications, troubleshooting, backup, and recovery procedures; develop standards and procedures to be used by other to efficiently utilize database facilities; analyze users’ requests and needs, and apply appropriate guidelines and resources to resolve them; provide technical expertise and knowledge in design, implementation, and maintenance of database management systems; optimize existing data access and availability; troubleshoot and accurately diagnose a wide variety of software, hardware, and LAN problems; design and program a variety of database and specialized software utilizing standard programming languages; communicate effectively and explain software usage to computer users of all skill levels; train and instruct others in application and database procedures; respond appropriately, effectively, and promptly to the needs of internal and external customers using principles of good customer service.

THE SELECTION PROCESS

The process may include an in-basket exercise, individual interviews, panel interviews and/or other related components.  Only those candidates who have the best combination of qualifications in relation to the requirements and duties of the position will continue in the selection process. The candidate selected for the position will be required to complete a background check including reference checks, fingerprint check, medical exam, drug-screening and/or other related components.

Human Resources will make reasonable efforts in the examination process to accommodate persons with disabilities. Please advise Human Resources of any special needs a minimum of five days in advance of the selection process exam by calling (916) 434-3229 or emailing hr@lincolnca.gov. The City of Lincoln is an Equal Opportunity Employer.

The information contained herein is subject to change and does not constitute either an expressed or implied contract.