Senior Information Security Specialist, Office of the Chief Security Officer

Description

About the Role

NOTE: The selected candidate will be required to undergo a background investigation conducted by the Port Authority Police Department (PAPD)

The Port Authority of New York and New Jersey's Office of the Chief Security Officer (OCSO) leads the protection of people, systems, and mission by coordinating physical, information, and operational security across the agency. Within the OCSO, the Information Security Group in the Security Technology and Programs Department is responsible for designing and managing programs that safeguard the agency across all Port Authority operations, including airports, the PATH rail system, bridges and tunnels, seaports, the bus terminal and the World Trade Center campus.

We are seeking a Senior Information Security Specialist who wants to make a significant impact on how information security is implemented across a large, complex, and operationally intensive environment. Reporting to the Manager, Information Security Programs, you will play a key role in the adoption of the agency's Information Security Program. This includes ownership of policy, training, risk and governance frameworks, and direct partnership with Departmental Information Security Officers (DISOs) to ensure consistent implementation across all lines of business.

In addition to the core information security program responsibilities, you will also research, develop and manage an Artificial Intelligence (AI) security program for the OCSO.

Success in this role requires someone with strong ownership, a proactive mindset and the drive to move initiatives forward across diverse departments. You will need to see the agency holistically, anticipate needs, and bring people together to achieve meaningful, enterprise-wide progress.

Responsibilities

• Build and mature the Information Security Program by embedding strong governance, smart automation, and continuous improvement

• Elevate Information Security awareness across the agency and strengthen relationships with DISOs and Security Information Managers, such as leading town halls and conducting annual check-in meetings

• Review agency presentations, drawings, and documents as needed to ensure they do not contain protected information before external use or distribution

• Develop agency-wide training for the Information Security Handbook

• Manage AI and cybersecurity risks in partnership withagency departments, anticipating threats, assessing controls and driving practical mitigations

• Evaluate and pilot emerging technologies with the agency's various innovation initiatives

• Assist the unit with other programs includingInsider Risk, SAFETY Act applications, security governance and business continuity

• Adapt to emerging security initiatives as the agency's needs evolve

Minimum Qualifications

• Bachelor's degree in Criminal Justice, Technology, Law, Public Administration, Cybersecurity or related field

• At least three (3) years of experience in information security, technology, risk management, or program management

• Demonstrated experience in information security, risk analysis, or security governance in a large or complex organization

• Demonstrated experience collaborating with diverse technical, operational, and external stakeholders to advance initiatives or programs

• Strong ownership mindset, proactive problem-solving, and ability to drive initiatives forward across multiple departments

Desired Qualifications

• Experience building, maturing or managing Information Security programs including policy, governance, training or assurance

• Excellent writing, communication, and presentation skills

• Familiarity with NIST CSF, ISO 27001, AI risk frameworks, and privacy considerations

• Hands-on collaboration with Cybersecurity and the ability to translate technical risks into business action

• Experience with AI risk management, responsible innovation practices, or emerging technology evaluation

• Knowledge of public-sector/transportation environments

• Experience with data networking components including TCP/IP, routing protocols and network monitoring tools

Selection Process

The application process varies by position but typically includes an initial phone interview for qualified candidates, followed by a more in-depth interview(s) and/or assessment(s). Selected candidates who are made a conditional job offer will be asked to undergo a background check.

Compensation & Benefits

The Port Authority of New York and New Jersey offers a competitive benefits package and a professional environment that supports development and recognizes achievement.? Click here for more information about benefits, our culture, and career development opportunities.?

?

The Port Authority of New York and New Jersey anticipates that the actual salary offered to a successful candidate will depend on aspects such as experience, knowledge, skills, abilities, and internal factors. The expected compensation range for this role is:?

?

Minimum: $97,162 Midpoint: $126,326 Maximum: $155,480?

?

In accordance with Port Authority policy, this position permits employees to work remotely a maximum of one day per week. In person collaboration is essential to how the Port Authority conducts business, and regular in-office days or team collaboration days may be required on business needs.

REQNUMBER: 64371