Security Lead

Security Lead

The Security Lead is responsible for the City's information security program and serves as the department's dedicated cybersecurity subject matter expert. This position leads security operations, network and perimeter security, physical security systems, artificial intelligence governance, risk and vulnerability management, incident response, security awareness, and compliance activities that protect the confidentiality, integrity, and availability of the City's systems, data, and facilities.

Working in close partnership with the Information Technology Director and the Service Manager, the Security Lead strengthens the City's security posture and resilience against evolving cyber threats, and ensures compliance with applicable laws, regulations, and standards. This is a focused, hands-on security role that influences practices across infrastructure, applications, end-user operations, and the City's physical security technology without direct supervisory responsibility. The role recognizes that cyber and physical security are converged disciplines, and that access control, surveillance, and facility protection are integral to the overall security program. The position also serves as the City's lead for the safe and compliant adoption of artificial intelligence, guiding how these tools are evaluated, deployed, and monitored across departments.

Essential Job Functions

• Security Program and Governance
• Risk, Threat, and Vulnerability Management
• Network and Perimeter Security
• Security Operations and Incident Response
• Physical Security Systems
• Security Awareness and Compliance
• Artificial Intelligence Governance and Secure Adoption
• Coordination and Vendor Management

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a closely related field required.
• At least three (3) years of experience in information security, network administration, or systems administration with a demonstrated security focus.
• Hands-on experience administering firewalls and VPN or secure remote access technologies.
• Any equivalent combination of education, training, and experience that provides the requisite knowledge, skills, and abilities may be considered.

Preferred Qualifications

• Experience with security frameworks, incident response, and vulnerability management.
• Experience in a municipal, public safety, or CJIS-regulated environment.
• Experience supporting electronic access control, badge reader, or video surveillance systems, and familiarity with the convergence of physical and cyber security.
• Experience developing or administering artificial intelligence governance, acceptable use, or emerging technology risk policies.

Licenses or Certifications

• Must possess and maintain Georgia Crime Information Center (GCIC) certification within 30 days after hire.
• One or more security certifications preferred, such as CompTIA Security+, CISSP, CISM, or equivalent.
• Must possess and maintain a valid Georgia driver's license, as the position requires travel between City facilities to support physical security systems.

Competencies and Required Knowledge, Skills, and Abilities

Knowledge Of

• Cybersecurity principles, frameworks, and best practices.
• Risk management, threat and vulnerability assessment, and incident response.
• Network, server, and endpoint security, and identity and access management.
• Applicable compliance requirements, including GCIC/CJIS.
• Firewall administration, VPN and secure remote access technologies, and network segmentation.
• Electronic physical access control systems, badge and credential management, and video surveillance and video management systems.
• Physical security controls for data centers, server rooms, and network facilities, including environmental and alarm monitoring.
• Records retention, privacy, and evidentiary handling requirements applicable to access control and video records.
• Artificial intelligence concepts, generative AI tools, and the associated data privacy, security, and compliance risks in a government setting.
• AI governance frameworks and responsible use practices, such as the NIST AI Risk Management Framework.

Ability To

• Assess, prioritize, and communicate security risks to technical and non-technical audiences.
• Lead incident response calmly and methodically under pressure.
• Influence security practices across teams without direct authority.
• Coordinate effectively with Facilities, Police, departments, and vendors on integrated physical and cyber security systems.
• Evaluate emerging technologies, including artificial intelligence, and balance innovation and business value against security, privacy, and compliance risk.
• Exercise sound, independent judgment in evaluating security information and selecting alternatives.

Physical Demands

The work involves light physical exertion, typically requiring some combination of stooping, kneeling, crouching, and crawling. It may also involve lifting, carrying, pushing, and pulling objects and materials weighing 12-20 pounds. Tasks may require extended periods at a keyboard or workstation, as well as travel between City facilities and occasional work on ladders or lifts when inspecting or supporting camera and access control equipment. The ability to perceive and discriminate colors, shades, sounds, odor, depth, texture, and visual cues or signals is also necessary. Some tasks also require oral communication skills.

Work Environment

Regular work may involve exposure to adverse environmental conditions, such as dust, electric currents, or bright/dim light, when supporting infrastructure, server, or network environments. Work may also occur outdoors or in mechanical, roof, or confined spaces when supporting cameras, access control devices, and related field equipment, and may require occasional response outside normal business hours for security events.

The City has the right to revise this job description at any time. This description does not represent in any way a contract of employment.

The City of Roswell, Georgia commits to a policy of equal employment opportunity for applicants and employees, complying with local, state and federal laws. The City's policy is to employ qualified persons without discrimination regarding race, creed, color, religion, age, sex, country of national origin, marital status, disability, sexual orientation, gender identity, genetic information, political affiliation, ethnicity, or status in any other group protected by federal/state/local law.