Security Manager

Agency Information Technology Services Position Title Security Manager - Expert Task ID

HBITS-08-14870

Position Duration 24 Months Client State of NY Contact Phone: View phone number on click.appcast.io | View phone number on click.appcast.io | View phone number on click.appcast.io Email: View email address on click.appcast.io Responsibilities Develop and implement a comprehensive cybersecurity strategy specifically tailored for IT/OT convergence in transportation systems. This includes risk assessments, vulnerability management, and incident response planning. Oversee the design and implementation of secure IT/OT architectures, ensuring that security controls are integrated at all levels, from enterprise networks to industrial control systems (ICS) and SCADA environments. Conduct regular risk assessments of IT and OT systems, identify potential vulnerabilities, and develop mitigation strategies. Ensure compliance with relevant industry standards, regulations (e.g., TSA directives, NERC CIP if applicable, NIST frameworks), and best practices. Establish and manage a robust threat intelligence program to proactively identify and respond to emerging cyber threats targeting transportation infrastructure. Implement and oversee security monitoring tools and processes for both IT and OT environments. Develop and lead the incident response plan for cybersecurity events affecting IT/OT systems. Coordinate response efforts, conduct forensic investigations, and implement corrective actions to prevent recurrence. Implement and manage a comprehensive vulnerability management program for all IT and OT assets, including regular scanning, penetration testing, and patch management. Develop and deliver cybersecurity awareness training programs for IT, OT, and operational staff, emphasizing the unique risks associated with IT/OT convergence. Assess and manage the cybersecurity risks associated with third-party vendors and service providers who have access to or interact with IT/OT systems. Collaborate closely with IT, OT engineering, operations, and other relevant departments to ensure security is a core consideration in all system design, development, and operational activities. Communicate security risks and strategies effectively to senior management and stakeholders. Develop and manage the cybersecurity budget for IT/OT convergence initiatives. Continuously research and stay abreast of the latest cybersecurity threats, vulnerabilities, technologies, and best practices relevant to transportation and critical infrastructure. Mandatory Qualifications

1. 84 months of experience in cybersecurity, with at least 3-5 years in a management or leadership role.
2. 84 months of experience in securing IT and OT environments, IT/OT convergence challenges and solutions specifically in transportation systems management and operations.
3. 72 months of experience in developing and implementing cybersecurity strategies, policies, and procedures in IT and OT environments specifically in transportation systems management and operations.
4. 60 months of experience with risk assessment methodologies and frameworks (e.g., NIST RMF, ISO 27001).
5. 60 months of experience with incident response, threat hunting, and digital forensics.
6. 60 months of experience with vulnerability management tools and processes.
7. 60 months of experience collaborating with cross‑functional teams; and producing both written and verbal communication articulating security concepts to both technical and non‑technical audiences.
8. MUST hold at least one of these certifications:

   CISSP

   , CISM, GIAC, GICSP.

Required Certifications CISSP CISM GIAC

GICSP

Required Documentation Resume Copy of Candidate Identification (Driver's License/Green Card/Visa and Passport if applicable) Any documents referenced in the above Requested Qualifications (e.g., professional certifications, degrees, etc.) Disclaimer i-Link Solutions Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. We especially invite women, minorities, veterans, and individuals with disabilities to apply. EEO/AA/M/F/Vet/Disability #J-18808-Ljbffr i-Link Solutions