Information Systems Security Manager

This is a highly technical and administrative position responsible for protecting municipal computer systems, networks, cloud services, virtual infrastructure, physical security systems, and data from cybersecurity threats. This position requires strong technical knowledge and hands-on experience in identifying, analyzing, and mitigating security risks. Working under the general supervision of the Director of Information Technology, this position ensures the town's technology environment remains secure, reliable, and compliant with all applicable standards and regulations. This position works closely with departments across the town and must balance independent responsibilities with collaborative initiatives. The position requires proactive thinking, continuous learning, and adaptability to evolving cybersecurity threats and technologies. Occasional after-hours work may be required to support critical incidents or system maintenance. Configures, deploys, and maintains security technologies, including firewalls, intrusion detection/prevention systems, endpoint protection platforms, and encryption tools. Administers and secures Active Directory, Microsoft Entra ID (Azure AD), Microsoft 365, and related cloud services through identity, authentication, and security best practices. Monitors and manages email security technologies, investigates phishing attempts, and implements measures to reduce spam, malware, and other email-based threats. Administers user accounts, roles, and permissions to support least-privilege principles and protect sensitive municipal data. Monitors on a continuous basis systems, logs, and alerts to identify potential threats, performance issues, or suspicious activities and responds promptly as necessary. Performs regular vulnerability scans, risk assessments, and (when appropriate) penetration testing and recommends and supports remediation activities. Coordinates and maintains operating system, application, and firmware updates; implements secure configuration standards and verifies timely remediation of identified vulnerabilities. Assists in developing, maintaining, and executing incident response plans; investigates and documents security incidents to ensure timely resolution and minimal service disruption. Supports and verifies backup, disaster recovery, and business continuity processes, including periodic testing to ensure the availability and recoverability of critical municipal systems. Contributes to the creation, review, and implementation of IT security policies and procedures; supports compliance with federal, state, and local cybersecurity and data privacy regulations. Assists with internal and external security audits and provides documentation supporting regulatory and compliance requirements. Provides end-user support on security matters, delivers training on safe computing practices, and promotes cybersecurity awareness across town departments. Assists with the administration, monitoring, maintenance, and security of the town's VMware vSphere virtual infrastructure, including virtual machines, hosts, storage, and backup operations. Researches, evaluates, and recommends emerging security tools, solutions, and best practices to strengthen the town’s security posture. Coordinates with technology vendors regarding support, maintenance, licensing, warranties, procurement activities, and project implementation as directed by the Director of Information Technology. Creates and maintains detailed documentation, including system configurations, security incidents, audit logs, and policy updates. Maintains and supports electronic access control, security camera infrastructure, and related physical security technologies; coordinates maintenance, upgrades, and vendor support as needed. Performs other related duties as required. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES: Considerable knowledge of network architecture, operating systems, and cybersecurity tools such as firewalls, IDS/IPS, SIEM platforms, and endpoint protection systems. Considerable ability to identify, investigate, and remediate cybersecurity vulnerabilities and security incidents across Windows, network, and cloud environments. Good knowledge of VMware vSphere and virtualized server environments, including virtual machine management, host administration, storage, networking, and security best practices. Considerable ability to assess risks, analyze system behavior, and develop effective mitigation strategies. Considerable ability to troubleshoot complex issues both independently and collaboratively. Considerable ability to manage multiple projects, prioritize tasks, and meet deadlines in a dynamic environment. Considerable ability to communicate orally and in writing, including the ability to clearly convey technical information to non-technical staff. Considerable ability to work with Microsoft Windows Server, Active Directory, Microsoft 365, Microsoft Entra ID, Group Policy, and related enterprise technologies. Considerable ability to establish and maintain effective working relationships with superiors, associates, subordinates, officials of other agencies and the public. Considerable documentation skills, including the ability to create and maintain technical documentation, system and network diagrams, process flowcharts, charts, and Microsoft Excel spreadsheets to support operations, reporting, compliance, and knowledge transfer. Good knowledge of public-sector requirements for data protection, including NIST, CJIS, HIPAA, and relevant federal and state cybersecurity regulations. MINIMUM QUALIFICATIONS: Bachelor's degree in computer science, information technology, cybersecurity, or a closely related field from an accredited college or university, plus five (5) years of progressively responsible experience in cybersecurity, network security, or related IT support roles, or any equivalent combination of education and relevant experience substituting on a year-for-year basis. Professional certification such as CISSP, CEH, Security+, GIAC, or their equivalent is desirable. SPECIAL REQUIREMENT: Must possess and maintain in good standing a valid State of Connecticut Driver's License. EXAMINATION: Written - 100% or Oral - 100% or Background Evaluation - 100% or Written - 50%/Oral - 50% or Written - 50%/Background Evaluation - 50% or Oral - 50%/Background Evaluation - 50% #J-18808-Ljbffr Wallingford, Town of (CT)