Chief Information Security Officer

Job Duties

• Establish Security Strategy: Develop and maintain the enterprise-wide vision and program to protect the FDNY’s critical information assets and emergency response technologies.

• Risk Management: Identify and assess cyber threats to ensure the continuous confidentiality, integrity, and availability of data supporting New York City’s public safety.

• Policy Development: Create and enforce comprehensive security policies, standards, and procedures to safeguard the Department’s Bureau of Technology Development & Systems.

• Incident Response Leadership: Direct the response to security breaches, coordinating across departments to minimize operational disruption and prevent recurrence.

• Regulatory Compliance: Ensure all IT systems comply with relevant local, state, and federal laws, as well as industry standards (e.g., NIST, HIPAA, CJIS).

• Team Leadership: Manage a dedicated team of IT security professionals, providing technical guidance and professional development.

• Executive Collaboration: Work with FDNY leadership to align cybersecurity initiatives with emergency response goals and broader city-wide objectives.

• Security Awareness: Design and promote training programs to foster a department-wide culture of security and data protection.

• Vulnerability Management: Oversee security monitoring, intrusion detection, endpoint security, and encryption protocols across the Department’s infrastructure.

Requirements

• Technical Expertise: Deep knowledge of LAN/WAN, Active Directory, PowerShell, Group Policy, and cloud security technologies.

• System Management: Proven experience in systems access management, change management, and disaster recovery planning.

• Security Tooling: Practical experience with industry-standard tools such as CrowdStrike, McAfee, and Rapid7.

• Framework Familiarity: Strong understanding of cybersecurity frameworks, specifically NIST and CIS Controls.

• Operational Flexibility: Ability to work a flexible schedule, which may include nights, weekends, and holidays to support 24/7 emergency operations.

• Communication: Ability to translate complex security risks into actionable business strategies for non-technical executives.

Qualifications

• Education: A Baccalaureate degree from an accredited college.

• Core Experience: Minimum of 4 years of full-time satisfactory experience related to IT projects and policies.

• Preferred Experience: 6+ years managing information security programs, preferably within a government or public safety context.

• Certifications: Possession of one or more industry certifications (e.g., CISSP, CISM, C-CISO, CISA, CEH, or GIAC).