The Office of Technology and Innovation (OTI) oversees all Citywide technology, privacy, cybersecurity, infrastructure, and telecommunications to ensure the security of, and enhance, City operations and service delivery to New York City's residents, businesses, employees, and visitors. As the City's technology and innovation leader, OTI is responsible for operating, maintaining and securing IT infrastructure and systems that touch every aspect of City life from public safety to human services, from education to economic development crossing the full spectrum of governmental operations.

At OTI, we offer great benefits, and the chance to work on projects that have a meaningful impact on millions of people. You'll have the opportunity to work with cutting-edge technology, transition our existing data infrastructure to a cloud-centric platform, and collaborate with other passionate professionals who share your drive and commitment to making a difference through technology.

About New York City Cyber Command
New York City Cyber Command (NYC3) is committed to protecting City systems that provide vital services to New Yorkers from cyber threats, and helping residents become safer in their digital lives.

As the organization defending the largest municipality in the country, NYC3 is charged with directing citywide incident response, setting citywide cybersecurity policies and standards and working with city agencies to strengthen their cyber defenses.

Job Description
The Deputy CISO for Threat Management is responsible for the Threat Management domain which encompasses the Security Operations Center (SOC), Computer Emergency Response (CERT), Cyber Threat Intelligence (CTI), Vulnerability Management (VM) and Counter Threat Automation (CTA) functions. The Deputy CISO is responsible for leading and executing an innovative, intelligence-integrated, risk-informed cyber defense and response strategy. The Deputy CISO must work across disciplines within NYC3 and across the City to lead detection and response for the City.

Deputy CISO, Threat Management will:

• Lead Threat Management teams, including supervision of people and processes;
• Lead citywide cyber incident response activities for cyber incidents across the City;
• Develop strategy, roadmaps, and Objectives and Key Resultus (OKRs) for Threat Management;
• Develop, manage, and refine the Threat Management metrics program based on operational load, process effectiveness, and supportability;
• Mentor and coach Threat Management team;
• Develop and test incident response policies and procedures for effective response;
• Oversee all Threat Management projects, including but not limited to: enhancements to the City’s security posture, incident coordination, incident recovery, and coordination with emergency management or other organizations, as appropriate.

1. A baccalaureate degree from an accredited college including or supplemented by 24 credits in the field of voice and/or data telecommunications or in a pertinent scientific, technical, electronic or related area, and four years of satisfactory fulltime experience in the performance of analytical, planning, operational, technical, or administrative duties in a voice and/or data telecommunications or closely related electronics planning, management, and/or service organization, one year of which must have been in a highly specialized capacity and 18 months must have been in an executive, managerial, or administrative capacity or in the supervision of staff performing work in the voice and/or data telecommunications field; or
2. An associate degree from an accredited college including or supplemented by 12 credits in the field of voice and/or data telecommunications or in a pertinent, scientific, technical, electronic or related area and five years of experience as described in "1" above; or
3. Education and/or experience equivalent to "1" above. However, all candidates must have at least a four-year high school diploma or its educational equivalent and one year of the specialized experience as described in "1" above and must possess the 18 months of executive, managerial, administrative or supervisory experience as described in "1" above.

The preferred candidate should possess the following:

• 10+ years of experience in information security incident handling and security operations;
• Experience supervising a team of more than 20 full time staff and contractors;
• Experience working in large scale, federated technology environments;
• Demonstrated ability to increase the effectiveness of an incident response program;
• A deep understanding of cybersecurity threats, vulnerabilities, controls and remediation strategies for traditional and cloud based environments;
• Knowledge of enterprise information technology (networking, endpoint, email, etc) and typical organizational challenges to incident response and recovery;
• Knowledge of common adversary tactics, techniques, and procedures, including the MITRE ATT&CK framework;
• Ability to communicate complex and technical issues to diverse audiences, verbally and in writing, in an easily-understood, authoritative, and actionable manner;
• Demonstrated ability to lead organizational change management efforts;
• team-focused mentality with the proven ability to work effectively with diverse stakeholders inside and outside of the organization;
• Strong organizational skills with proven ability to manage multiple high visibility issues simultaneously;
• Relevant Technical Security Certifications (GIAC GCIA/GCIH/GCFA, CISSP, SSCP, CISM, Offensive Security, etc) a plus.

Special Note: Taking and passing civil service exams are necessary to maintain employment with the City of New York. Please check the Department of Citywide Administrative Services (DCAS) website (http://www.nyc.gov/html/dcas/html/work/exam_monthly.shtml) for important exam filing information. Please ensure that you are either a permanent employee in the civil service title listed on this posting, or, that you file for the examination when there is an open filing period. For more information regarding the civil service process, please visit the DCAS website at: http://www.nyc.gov/html/dcas/html/work/work.shtml

• Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration

For City employees, please go to Employee Self Service (ESS), click on Recruiting Activities > Careers, and search for Job ID #583722
For all other applicants, please go to www.nyc.gov/jobs/search and search for Job ID #583722

SUBMISSION OF A RESUME IS NOT A GUARANTEE THAT YOU WILL RECEIVE AN INTERVIEW
APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL

NOTE: This position is open to qualified persons with a disability who are eligible for the 55-a Program.
Please indicate in your cover letter that you would like to be considered for the position under the 55-a program.

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.

OTI(DoITT) participates in E-Verify

This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.

Day - Due to the necessary technical management duties of this position in a 24/7 operation, candidate may be required to be on call and/or work various shifts such as weekends and/or nights/evenings.

Brooklyn, NY

New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for 2 continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of interview.