FirstBank Jobs

This job was posted by https://www.vermontjoblink.com : For more information, please see: https://www.vermontjoblink.com/jobs/1167768

This position is responsible for implementing, supporting, and managing the City of Burlingtons cybersecurity initiatives and policies. Responsibilities include design, implementation, and review of security controls, monitoring of internal/external access controls, and implementing security safeguards to protect the confidentiality, integrity, and availability of the digital assets of the City of Burlington. This role will be focused on protecting system boundaries; keeping computer systems, applications and network devices hardened against attacks, maintaining the integrity, accessibility, and availability of the Citys digital data assets, monitoring and responding to significant security events, and ensuring the stability, integrity, and secure operation of critical in-house and cloud-based systems and networks.

\ Union Affiliation:Non-Union\ Pay Grade 19:\$75,720.22-\$84,474.15 Annually

Essential Job Functions

• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organization\'s data, systems, networks, and security tools including, but not necessarily limited to: IDS, IPS, Firewall, VPN, IDP, WAF, DLP, SIEM, Web Proxies, and Vulnerability Scanners
• Work closely and collaborates with third party teams (including but not limited to the Citys contracted MSSP and the Cybersecurity & Infrastructure Security Agency CISA) to analyze, investigate, and respond to security incidents, sharing expertise and insights to enhance the organizations cyber defense strategy.
• Lead the design and deployment of group policy to harden endpoints and infrastructure including networks, data repositories, and other digital assets.
• Provide consultation to the I&T team in preparation and implementation of patch management and firmware management.
• Support other I&T staff in managing backup infrastructure, including testing and preparation of disaster recovery plans and policies.
• Detect, investigate, and perform recovery from security incidents, and assist with incident response plans.
• Conduct threat and vulnerability risk assessments to determine security requirements and proactively fix security flaws and vulnerabilities.
• Conduct analysis of security requirements and controls to identify gaps and provide recommendations of industry best practices, trends, and technology products.
• Support the development of and adherence to policies, standards, and procedures for data\ governance and data management.
• Assist in the identification, evaluation, deployment, and optimization of security technologies.
• Design and present annual cybersecurity training to City of Burlington staff members.
• Work closely with all City of Burlington departments to ensure adequate security solutions are in place for all systems and platforms to sufficiently mitigate identified risks and meet business objectives.
• Ensure that the organization\'s data and infrastructure are protected by enabling the appropriate security controls.
• Provide security design, consultancy, and assessment services and introduce improvements in technical security standards and security implementation patterns and designs.
• Maintain awareness of latest security risks, analyze potential impact of new threats and exploits, and communicate risks to relevant business units.
• Create reports on security incidents and overall enterprise security status.
• Develop security-related procedures and related metrics; review and contribute to the improvement and standardization of security systems across the City of Burlington.
• Create and implement cybersecurity best practices in accordance with the City\'s access control, disaster recovery, business continuity, and risk management policies, plans, and procedures.
• Perform daily administrative tasks, reporting, and communication with relevant departments in the organization.
• Collaborate as a member of the I&T team sharing information, mentoring, cross-training, and providing coverage as directed by the supervisor.

\ Non-Essential Job Functions:\ Performs other duties as required.

##