Senior Information Technology Security Analyst

Responsible for designing, implementing, and supporting the City’s enterprise information security program, with technical leadership across governance, risk, compliance, audits, and incident response.

Responsibilities

• Designs, implements, and supports secure information security architecture for the City of Fort Lauderdale.
• Delivers cybersecurity governance, risk, compliance, and audit assessments aligned to CJIS, PCI-DSS, HIPAA, NIST, and other applicable requirements.
• Develops, reviews, and maintains cybersecurity policies, procedures, and standards to meet regulatory needs and improve security operations.
• Acts as a technical lead and escalation point for cybersecurity initiatives and complex issues.
• Coordinates project activities and provides subject matter expertise to support implementation across large, multi-department groups.
• Evaluates cybersecurity impact of proposed projects and initiatives across the City’s technology environment.
• Researches emerging threats, vulnerabilities, and attack techniques and assesses potential impact to City systems.
• Supports cybersecurity awareness initiatives, providing security guidance and education to employees and stakeholders.
• Reviews proposed technologies, including cloud and Artificial Intelligence solutions, to ensure cybersecurity controls, privacy safeguards, and risk mitigations are incorporated.
• Performs cybersecurity risk assessments for systems, applications, cloud services, and third-party vendors; leads vendor cybersecurity risk management activities.
• Coordinates vulnerability management, including risk prioritization, remediation tracking, and exception management.
• Documents security concerns and communicates significant cybersecurity risks and incidents to appropriate leadership on a timely basis.
• Supports the testing, selection, placement, implementation, documentation, operation, and maintenance of information security technologies.
• Maintains security logs and produces reports related to information security activities.
• Plans, coordinates, manages, or performs internal and external security assessments, audits, and evidence-gathering exercises.
• Provides technical guidance, mentorship, and subject matter expertise to less experienced Security team members; serves as an escalation point for complex security issues.
• Leads cybersecurity incident response activities, coordinates remediation efforts, and provides post-incident recommendations to reduce organizational risk.
• Keeps current on developments and updates in information security technology.
• Performs related work as required.

Requirements

• Bachelor’s Degree in Information Technology, Computer Science, Management Information Systems, or a related field.
• Five (5) to Seven (7) years of experience designing, implementing, and supporting enterprise-wide IT security programs (hardware, software, policies and procedures), including writing and auditing policy, procedures, and standards.
• At least one (1) year of supervisory experience.
• To claim Veterans’ Preference, attach to the application a copy of military separation papers (DD214) and service-connected disability documentation (if applicable), as required by Florida Statutes.

Technologies

• CJIS
• PCI-DSS
• HIPAA
• NIST
• CISSP
• CISM
• GIAC
• CCSP
• Microsoft 365
• Entra ID
• EDR/XDR
• SIEM
• IDS/IPS
• Active Directory
• OT
• SCADA

Benefits

• Vacation
• Holiday
• Sick leave
• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Short-term disability insurance
• Federal Retirement System (FRS) with an investment option and a pension option (3% employee contribution; new employees automatically enrolled)

Preferences

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), Certified Cloud Security Professional (CCSP), or other relevant cybersecurity certifications.
• Experience with cybersecurity architecture and engineering; vulnerability management; incident response; vendor risk management; cloud security; Microsoft 365 and Entra ID security; email security; endpoint detection and response (EDR/XDR); security information and event management (SIEM) platforms; intrusion detection and prevention systems (IDS/IPS); Active Directory security; disaster recovery (DR) and business continuity planning (BCP); Operational Technology (OT) and SCADA security; and cyb