Cyber Security Officer

• Develop and maintain the City’s and electric utility cybersecurity vision, strategy and program; to include administration, implementation, maintenance and ongoing support of in-house and/or third party cybersecurity technologies, including but not limited to, end-point protection, security event manager (SEM) software, monitoring applications, etc. 
• Develop and implement citywide cyber information security policies, standards, and procedures to protect the City from internal and external threats and vulnerabilities; formulates and recommends citywide policies for detecting, deterring, and mitigating information security threats. 
• Work with leads in other departments, to identify vulnerabilities and opportunities to further enhance security measures to mitigate these vulnerabilities. 
• Coordinate, document internal controls/plans, to ensure ongoing business-critical services are recovered in the event of a declared disaster, and provide direction and in-house consulting in these areas to continue compliance with NIST guidelines, applicable laws and NERC CIP reliability standards. 
• Perform system reviews to ensure compliance requirements are maintained and evidence is validated. 
• Serve as the City’s Cybersecurity Subject Matter Expert and provide technical support for regulatory and internal audits. Accountable for providing evidence, response to audit inquiries and support of various Compliance Teams. 
• Serve as the City’s liaison in all cybersecurity related matters. 
• Work with vendors and/or developers to tune existing applications to further enhance their security while maximizing the application’s performance. 
• Participate in the evaluation of available cybersecurity hardware and software; provide input on hardware, software and other costs and facilitates adoption discussions. 
• Prepare analytical and statistical cybersecurity reports to determine need for modification or enhancements to meet current and future needs. 
• Develop, implement, and monitor cybersecurity contingency plans in case of a successful attack. 
• Develop and oversee City of Redding Cybersecurity training, to include, cybersecurity policies, procedures, and regulatory requirements. 
• Regularly conduct mock cybersecurity attacks such as phishing campaigns, and follow up training as needed, to ensure City employee are trained on current phishing scams. 
• Manage multiple concurrent assignments with varying deliverables and dates. 
• Perform the deployment, integration and initial configuration of new security solutions and enhancements to existing security solutions in accordance with applicable laws and standards. 
• Perform other related duties within the scope of the job classification.

• Complex computer network system environments 
• Strong understanding of network administration protocols 
• IT risk/threat assessment process and practices
• Principles, framework, and methods used in the analysis and development of information security systems and procedures
• Cybersecurity software and systems
• Utility operating practices and procedures 
• Department of Homeland and Department of Justice regulations specific to Cybersecurity; contracts and legal requirements
• Regulatory compliance programs
• Effective presentation and training methods

• Maintain a high degree of expertise to research, analyze, evaluate, recommend security, and network applications
• Communicate effectively, both orally and in writing with various levels within the City of Redding
• Interact effectively with the public and employees
• Interpret and summarize a variety of data and information
• Understand the benefit and risks of various IT security solutions 
• Develop information security services related to policy and strategy 
• Perform risk assessments and problem resolutions
• Recommend and implement preventative techniques 
• Demonstrate good time management skills
• Safeguard and maintain confidential information
• Make effective presentations to groups
• Travel as needed

• Typical education would include a Bachelor's degree in Computer Science, Cybersecurity or directly related field.
• Five (5) years progressively responsible experience in information technology comparable to the level of this position, which includes two (2) years in design, development and delivery of information security.
• Possession of the appropriate California driver's license, or the ability to acquire one within ten days of appointment. 
• Requires some work to be performed after normal working hours and is subject to being on call to solve system problems, provide back-up for staff, etc.

You will receive notifications pertaining to this recruitment at the e-mail address and text message number provided on your application. Email correspondence may go to your spam and junk mail folders.
 
Examination Process: The exam process may involve an online written examination and/or an oral board examination. This recruitment will establish an eligibility list that may be used to fill current and future vacancies.
 
Selection Process:
Final appointment is contingent upon:

• Positive past employment references.
• Review of driver history record.
• Passing a city paid fingerprint criminal conviction check (applicants 18 and older).
• Passing of a pre-employment medical exam and drug and alcohol screening test.