IS Manager II - Security (Open and Promotional)

Overview We are seeking a highly experienced and adaptable IS Manager II – Security to lead a critical cybersecurity program within a fast-paced, evolving threat landscape. This role oversees a team of cybersecurity professionals and is responsible for protecting the organization’s systems, data, and infrastructure against increasingly sophisticated threats. This position requires a leader who can operate effectively in a dynamic, high-risk environment, where cyber threats evolve rapidly and require both proactive strategy and reactive response. You will play a key role in shaping security architecture, leading incident response efforts, and ensuring compliance with industry standards and regulatory frameworks. The IS Manager II - Security will directly manage a supervisor and a team of four security engineers, as well as a full-time investigative and compliance resource, providing leadership, direction, and oversight across multiple critical security domains. Responsibilities Lead and manage cybersecurity operations across multiple critical security domains. Direct and oversee incident response efforts, including major cybersecurity events. Maintain comprehensive incident response plans and coordinate/conduct annual response training. Guide the design and implementation of secure system architectures, ensuring risk is minimized. Establish and maintain standard operating procedures (SOPs) and security processes. Oversee the administration and effectiveness of enterprise security tools and technologies. Ensure alignment with security frameworks, policies, and regulatory requirements. Respond to and support investigative requests (criminal and non-criminal) in coordination with internal and external partners. Collaborate with cross-functional teams to strengthen the organization’s overall security posture. Stay ahead of emerging threats, adapting strategies in response to evolving attack methods. Manage the security team, security operations, and associated technologies including, but not limited to, network security, incident management, threat assessments, endpoint security, vendor reviews, and security architecture. Serve as the main point of contact for county-wide security initiatives and communications with partner agencies and core county resources. Remediate security findings resulting from cybersecurity incidents, audit findings, or agency compliance reviews. Oversee administration and maintenance of department-specific applications and platforms; evaluate, participate in, and manage IT and business process redesign; establish support processes to ensure availability of applications and database services. Plan, manage, and oversee the daily functions, operations, and activities of assigned information services programs. Participate in developing and implementing goals, objectives, policies, and priorities for assigned programs; recommend staffing levels and procedures. Participate in developing and overseeing assigned budgets. Develop and standardize procedures to improve efficiency and effectiveness of programs and service delivery; assess workload and reporting relationships; identify opportunities for improvement. Participate in selecting, training, motivating, and evaluating assigned personnel; coordinate with HR on disciplinary actions as needed. Oversee special projects; manage consultant RFPs and contract terms; ensure contractor compliance with standards. Provide highly complex staff assistance to management as required. Perform other duties as assigned. Qualifications Education and Experience : Any combination of education and experience that would provide the required knowledge, skills, and abilities is qualifying. A typical qualification includes three (3) years of increasingly responsible experience in systems development or programming, including one (1) year in a project lead capacity. Knowledge of : Advanced principles and practices of program management, including planning, implementation, and evaluation. Job planning and prioritizing techniques. Information management platforms and systems. Principles and techniques of advanced systems analysis and design. Supervisory principles and practices, including work planning and evaluation, project management, scheduling, and training. Principles of budget preparation and monitoring. Principles of personnel training, supervision, and evaluation. Data processing principles, concepts, and terminology. Methods and practices of computer system design, programming and implementation. Structuring techniques for efficient program construction and maintenance. Tools and methods used to standardize and facilitate system design and project management. Current technologies for systems design and delivery. Phases of software life cycles. Project scheduling methodology (PERT/CPM). Cost estimating and cost/benefit analysis. Skill/Ability to : Plan, organize and coordinate programs and services on a county-wide level to meet customer needs. Coordinate program area activities with other departments and outside agencies. Integrate activities to achieve program goals and priorities. Work cooperatively with other departments and organizations. Analyze problems, develop recommendations, and take appropriate action. Prepare complex written reports, procedures, and contracts. Use initiative and sound independent judgment within guidelines. Maintain accurate records and files. Organize work, set priorities, and meet deadlines. Establish and maintain effective working relationships with stakeholders. Communicate effectively both orally and in writing. Analyze complex operational, programming and systems problems, evaluate alternatives and reach sound conclusions. Plan, schedule and manage large-scale projects; identify critical paths and risks. Negotiate agreements between different individuals or groups. Supervise, evaluate and train assigned personnel. #J-18808-Ljbffr County of San Mateo