SENIOR SECURITY ANALYST

at City of Chicago in Chicago, Illinois, United States

Job Description

Description:

JOB ANNOUNCEMENT

SENIOR SECURITY ANALYST

DEPARTMENT OF TECHNOLOGY AND INNOVATION

Number of Positions: 1

(Additional vacancies possible pending budget approval)

Starting Salary: $ 116,640.00

Applications for this position will be accepted until 11:59pm CDT on 08/13/2024

Under immediate supervision, the class functions at the advanced level assisting in the administration of IT security services across the City’s enterprise network including security analysis, incident response, resiliency, threat management, identity and access management, governance, risk and compliance, network security management, and performs related duties as required.

This class is assigned to the City’s Analyst Information Technology Job Family which consists of analysts that work with stakeholders to identify and define needs/issues, document requirements, perform analysis, solve problems with fact-based analysis, and provide recommendations.

This class is distinguished from the entry-level by the amount of discretion exercised over technical issues, problems and resolutions; positions must possess a significant level of specialized technical and functional expertise beyond that expected at the entry level; require highly specialized knowledge, abilities and skills and experience and often exercise independent judgement in the performance of their duties. The senior level also has greater latitude in determining work methods and assignments; greater authority over assignments and decisions required to complete the work than the lower-level classification; and works on complex security services.

Cybersecurity Support – Identity & Access Management

Combines a risk management mindset, information systems knowledge and a significant level of specialized technical and functional expertise in the cybersecurity field of Identity and Access Management to drive Identity and Access Management capabilities for the City of Chicago.

Managing team members, both direct reports, matrixed employees and third parties, to address technical issues and problems and develop resolutions through the application of analytical thinking and the demonstration of ownership and commitment, initiative and being outcome driven.

NOTE : The list of essential duties is not intended to be inclusive; there may be other duties that are essential to particular positions within the class.

ESSENTIAL DUTIES

· Monitors and utilizes intrusion detection systems and security toolsets for the identification of suspicious and malicious activities and inadequate security practices across the City’s network (e.g., analyzes network traffic, vulnerability scans, identification of computer viruses, unauthorized user activity) which may compromise the confidentiality, integrity, and availability of systems

· Analyzes and monitors security violations, alerts and reports and acts as a liaison regarding all security vulnerabilities reported.

· Performs security risk assessments, audits and tests against internal sites and systems

· Analyzes, coordinates, and manages threat intelligence data

· Monitors the City’s ongoing compliance with regulations, internal policies, standards, and procedures

· Works closely with management and department leaders to ensure business operations requirements meet IT security and compliance practices and polices

· Documents and manages the City’s support of identity and access management capabilities

· Develops and coordinates enterprise-wide security training, communication, and outreach efforts

· Manages Information Security projects and issues (e.g., application development/selection, system upgrades and installation, technology initiatives)

· Monitors and reports on enterprise-wide compliance against security requirements

· Collaborates with technology partners, support representatives, and IT management to coordinate and remediate security risks

· Keeps abreast of security related technology, best practices, and regulations

· Prepares technical and status reports for management review

· Functions as a liaison with operating departments IT personnel to ensure City security technology processes and procedures are adhered to (e.g., approval of hardware/software purchases, provide technical expertise and guidance, etc.

· Assists in the development, testing and simulation of the City’s continuity of operations and associated plan(s)

· Supports governance, risk, and compliance activities

· Supports activities related to vendor management & contract management, performing appropriate analysis

· Assists with creating and maintaining security policies, standards and procedures

· Performs business analysis including requirements gathering and gap analysis, as required

· Managing and mentoring team members

Location: 2 N. LaSalle St., Chicago, IL

Days: Monday-Friday

Hours: 8:00am-4:00pm

THIS POSITION IS EXEMPT FROM THE CAREER SERVICE

Qualifications:

MINIMUM QUALIFICATIONS

Graduation from an accredited college with an Associate’s degree in Computer Science, Cybersecurity, Information Technology/Systems, or a directly related field, plus three (3) years of experience in information security, network architecture or engineering, application development, information technology auditing/compliance or an equivalent combination of education, training and experience.

NOTE:

Preference may be given to applicants who possess the following:

· professional IT security, firewall and network certifications.

SELECTION REQUIREMENTS

This position requires applicants to complete an interview. The interviewed candidate(s) possessing the qualifications best suited to fulfill the responsibilities of the position, based on the interview will be selected.

APPLICATION EVALUATION: Initial evaluation will be based on information provided on the application and the documents submitted. Department of Human Resource staff will review applications after the final posting date. Staff will follow any and all required Employment/Hiring Plan provisions, federal, state and local laws, and Collective Bargaining Agreements when applicable. Staff will apply hiring preferences as required by the municipal code. Placement on an eligibility list is not an offer or guarantee of an interview nor employment with the City of Chicago.

COMMITMENT TO DIVERSITY: To further our commitment to hiring applicants with diverse experience the City of Chicago has adopted the following ordinances 2-74-020 and 2-74-075. The ordinances provide a preference to applicants who meet minimum qualifications and who are veterans of the Armed Forces, and/or residents of Socio-Economically Disadvantaged Areas (SEDA) and/or Chicago Public School (CPS) high school graduates to be referred to departments for consideration. These hiring preferences do not apply to bidders, as Collective Bargaining Agreements define the hiring process for bidders. For positions covered by a collective bargaining agreement, bidders will be considered before external candidates. To learn more about our hiring practices click here. (https://www.chicago.gov/city/en/depts/dhr/provdrs/emp.html)

ALL REFERENCES TO POLITICAL SPONSORSHIP OR RECOMMENDATION MUST BE OMITTED FROM ALL APPLICATION MATERIALS SUBMITTED FOR CITY EMPLOYMENT.

The City of Chicago in an Equal Employment Opportunity and Military Friendly Employer.

City of Chicago

Brandon Johnson, Mayor