The Queens County District Attorney’s Office (QDA) is seeking a Chief Information Security Officer (CISO) who will lead in the implementation and management of information security controls that will increase overall information security posture. Under the direction of the Chief Information Officer (CIO), the successful candidate will be responsible for the integration of information security controls and overall information security awareness across all departments and units. The CISO will be responsible for the compliance of IT systems, applications and networks with security policies and information protection strategies; develop, publish, and maintain agency information security policies, standards, procedures, and guidelines; provide technical guidance and training to information "owners," agency IT teams, and design and implement programs for user awareness, and security compliance monitoring. The candidate will analyze potential security risks or breaches that have occurred and implement widely accepted and automated technologies to mitigate these risks/breaches and harden security systems for effective defense.

The CISO will perform the following job functions, including, but not limited to:

• Oversee Cyber Security Governance and Controls
• Lead the development of Cyber Security Policies, Procedures and Standards review and refresh.
• Implement Controls and Compliance to enforce hardening of networks, endpoints, and applications.
• Make recommendations to the CIO on an information security roadmap based on risk analysis and assessments for current state and future state of information security posture.
• Manage the daily use and administration of strategic cyber risk and long-term threat intelligence products.
• Lead in developing communications for end users and stakeholders around cyber security issues.
• Develop and implement a user cybersecurity awareness and training program.
• Oversee sustained and successful participation by IT security in any cyber security relevant audits; perform threat modeling and subsequent risk mitigation.
• Plan and execute regular incident response and postmortem exercises.
• Manage cyber security private/public and Federal/State/City relationships; and manage special cyber security projects, as assigned.
• Evaluate budgets to determine and justify the cost of cyber security upgrades.
• Stay current with and remain knowledgeable on new threats and advanced threat detection techniques.

Preferred Education and Qualification Requirements:

1. A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or,

2. Education and/or experience which is equivalent to "1" above.

For current New York City employees, a permanent computer-related civil service title is preferred but not required.

Application Information:

Salary Range: $175,000 - $200,000 (Commensurate with experience)

Comprehensive benefits package including health insurance, 401K and more. 

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.

To apply, please submit a resume and cover letter via the link below: