Cybersecurity Information Technology Manager Full Time

The current vacancy is for Cybersecurity Information Technology Manager in the City’s Information Technology Department.  The eligibility list established from this recruitment may be used to fill other Information Technology Manager vacancies during the life of the list, to include the Information Technology Manager for the Santa Cruz Public Libraries. The eligibility list established from this recruitment is valid for up to one year from the date established unless the list is extended or abolished by the Chief People Officer. 

The Information Technology (IT) Department’s mission is to efficiently deliver business-driven, quality technology solutions and services for the City of Santa Cruz staff and public. IT focuses on infrastructure, communications, business and client services, relationship management, security, and administration services.

Under administrative direction, the Information Technology Manager plans, coordinates, directs, and designs IT-related activities of the organization, as well as provides administrative direction and support for daily operational activities; works closely with decision makers in other departments to identify, recommend, develop, implement, and support cost-effective technology solutions for all aspects of the organization; oversees the operations of the enterprise’s IT security solutions and ensures compliance with IT security standards; defines and implements IT policies, procedures, and best practices; manages projects and project portfolio; supervises assigned staff; and performs related duties as assigned.

If assigned as the Cybersecurity IT Manager (City/SCPL):  CURRENT VACANCY

Manages the cybersecurity related activities of the Information Technology Department.  Integrates all information security activities to preserve the availability, integrity, and confidentiality of the organization’s data and assets; assists in policy development for data threat strategies and security tools; for incident response, makes recommendations and manages event(s) as needed; responsible for overall cybersecurity program management, including systems analysis and modification, vendor administration, and enterprise-wide coordination.

If assigned to Santa Cruz Public Library (SCPL):

Plans, organizes and directs the Library Information Technology (LIT) services related to all computer and network hardware, software applications, Payment Card Industry (PCI) compliance, phone systems, and data telecommunications.

Recruitment #24-046

Selection Timeline: (Note: The following process may be changed as deemed necessary by the Chief People Officer.)

• On Thursday, 12/21/23 recruitment will close. NOTE: City offices will be closed 11/23 and 11/24/23 and from 12/25 to 01/07/23. All application materials must be received by the Human Resources Department by 5:00 pm; postmarks are not accepted.  To apply, submit:

1. Application – online application only.  Resumes are not accepted in lieu of filling out the application form completely.  Click the Apply button to begin the online application process.
2. Response to supplemental questions – will be a primary tool in the evaluation of your qualifications for this position. Any work experience described here must also be included in your employment history on the main application.

• Weeks of 01/08 and 01/15/23:  Applications will be competitively screened based on the minimum qualifications for this position.  

• Week of 01/22 and/or 01/29/23: Applicants will be notified of their status in the recruitment and interviews will be tentatively scheduled for top candidates. 

(May include, but are not limited to the following):

• Leads operational and strategic planning, including fostering innovation, planning projects, and organizing and negotiating the allocation of resources.
• Benchmarks, analyzes, reports on, and makes recommendations for the improvement and growth of the IT infrastructure and applications.
• Manages financial aspects including purchasing, budgeting, and budget review.
• Develops business case justifications and cost/benefit analyses for IT spending and initiatives.
• Develops and implements IT policies and procedures, including those for architecture, security, disaster recovery, standards, purchasing, and service provision.
• Prepares and evaluates requests for proposals, bids, specifications, contracts, and statements of work; coordinates the acquisition, installation, operation and maintenance of information systems hardware and software, and monitors vendor and consultant contracts to ensure compliance with performance requirements.
• Negotiates and administers vendor, outsource, and consultant contracts and service agreements.
• Manages the deployment, monitoring, maintenance, development, upgrade, and support of IT systems, including networks, security and firewalls, servers, PCs, operating systems, hardware, application software, backups, disaster recovery / business resumption planning and off-site storage, and peripherals.  May work tactically in these areas as needed.
• Establishes security standards and policies for all tiers of IT infrastructure and applications;
• Oversees provision of end-user services, including help desk and technical support services.
• Works with stakeholders to define business and systems requirements for new technology implementations.
• Directs research on potential technology solutions in support of procurement efforts.
• Keeps current with the latest technologies, attends and participates in professional and community meetings.
• Develops and oversees all aspects of disaster recovery and business resumption planning for networks, servers, and/or software applications.
• Approves and oversees projects and manages IT project portfolio.
• Practices asset management for IT hardware, software, and equipment.
• Manages IT staffing, including recruitment, supervision, scheduling, training, development, evaluation, and disciplinary actions.
• Establishes and maintains regular written and in-person communications with the organization’s executives, department heads, and end users regarding pertinent IT activities.
• Performs other related duties that may be reasonably expected as part of this classification.

 
If assigned as the Cybersecurity IT Manager (City) CURRENT VACANCY
In addition to the typical duties noted above:

• Develops and implements cybersecurity strategies to protect digital assets, networks, systems, and data from threats and breaches.
• Conducts or manages risk assessments and IT audits to identify vulnerabilities and recommends security measures for IT systems.
• Establishes and enforces security policies and procedures to ensure compliance and provides employee training.
• Manages security technologies including firewalls, intrusion detection systems, antivirus software, encryption tools, and authentication systems to protect against security threats.
• Conducts comprehensive application vulnerability assessments and provides guidance and oversight on effective patch management processes to ensure robust security measures.
• Manages incident response and disaster recovery, including plan development, coordination during incidents, and overseeing recovery.
• Stays updated on cybersecurity trends, threats, and technologies through continuous learning, conferences, networks, and certifications.
• Collaborates with stakeholders to align security initiatives with business objectives and address concerns across the organization. 

If assigned to SCPL:
In addition to the typical duties noted above:
 

• Applies for and  administers  grants  related   to Information Technology,  including  the Federal E-Rate program as well as California Library Connect via the California State Library (CSL).

 
WORKING CONDITIONS:
Position requires prolonged sitting, standing, walking, squatting, turning, stooping, crouching, kneeling and reaching in the performance of daily activities; repetitive hand movements and fine coordination in preparing reports using a computer keyboard; both near and far vision in performing duties; color vision to accurately interpret visual displays; acute hearing is required when providing phone and personal service. The need to lift, carry, drag and push equipment and materials weighing up to 25 pounds is also required. Some of these requirements may be accommodated for otherwise qualified individuals requiring and requesting such accommodations.  Additionally, off-site travel, attendance at multi-day off-site training sessions, weekend and evening work, and after-hours emergency call outs may be required.
 

The minimum qualifications for Education, Experience, Knowledge, Skills and Abilities are the following:
 
Education and Experience : 

• Bachelor’s degree in Information Systems, Computer Science, Business Management, Management Information Systems or related field; and 
• Four (4) years of increasingly responsible professional experience as a Network Administrator, Database Administrator, Systems Administrator, Programmer, Business Systems Analyst, Project Manager or other IT subject area including two (2) years of supervisory experience.
• In lieu of a Bachelor’s degree, four (4) years of additional relevant experience (eight (8) years total) may be substituted. 

 
Knowledge: 

• Full-cycle function, implementation and support of infrastructure and/or application solutions.
• Subject matter expertise in one or more of the following areas:  networks; security; communications; packaged applications; software development; systems administration; field technical services.
• Project planning and project management tools and techniques.
• Budgeting processes, implementation and monitoring.
• Principles and practices of supervision including work planning, review and evaluation.
• IT security and applicable data privacy practices and laws.
• Principles and practices of troubleshooting techniques.

If assigned as the Cybersecurity IT Manager (City/SCPL)  CURRENT VACANCY
In addition to the above Education, Experience and Knowledge: 

•  Cybersecurity principles and best practices: Understanding of fundamental concepts, frameworks, and methodologies related to cybersecurity, such as risk management, access control, encryption, network security, and incident response.
• Awareness of relevant cybersecurity standards and regulations such as ISO 27001, NIST Cybersecurity Framework, GDPR, HIPAA, and PCI DSS.
• Knowledge of incident response procedures, incident handling, and digital forensics techniques to effectively respond to and investigate security incidents.

If assigned to SCPL:
In addition to the above Education, Experience and Knowledge: 

• Current trends and innovations in technology and Library Information Science. 

Abilities: 

• Provide technical advice and consultation to ensure efficient network, application or other technical solutions.
• Establish and maintain appropriate documentation and reports, including but not limited to project status and performance measures.
• Stay abreast of emerging technological developments.
• Successfully manage and prioritize multiple tasks.
• Communicate effectively, orally and in writing, including communicating technical information in business-friendly and user-friendly (non-technical) language.
• Interact tactfully and effectively with City employees, vendors and the public, and maintain a positive customer service mindset.
• Effectively lead and train others. 
• Align business and department goals.
• Analyze, troubleshoot and solve complex technical problems.
• Exercise initiative and independent analysis and judgment in solving complex technical problems.
• Be attentive to detail.
• Be team-oriented and successfully work within a collaborative environment.
• Observe safety principles and work in a safe manner.

All assignments except Library: 

In addition to the above Abilities:

 
Licenses and Certificates

All assignments

• Possession and continued maintenance of a valid California Class C driver’s license. 

 
DESIRABLE QUALIFICATIONS

• Experience working in a public agency.
• Proficiency in the configuration and setup of Microsoft server and client infrastructure used by the City.
• Experience utilizing remote network access software products.
• Administration of computer networks using the most recent MS Server, SQL Server and MS/Exchange products.
• Knowledge of typical government application software and associated operational requirements.
• Knowledge of the business applications and report writing software used by the City.
• Knowledge of Microsoft SQL Server administration and maintenance.
• Possession of Microsoft system administration role-based certifications. 
• Possession of a Microsoft Certified Data Base Administrator (M.C.D.B.A.) certificate or equivalent.

If assigned as the Cybersecurity IT Manager: (City/SCPL)  CURRENT VACANCY

In addition to the above Desirable Qualifications:

• Professional experience in cybersecurity application and infrastructure technology management.
• Possession of cybersecurity certifications such as, but not limited to, (ISC)2 CISSP, ISACA CISM, CISA, CRISC, CompTIA Security+, GIAC Security Leadership Certification 

If assigned to SCPL:

In addition to the above Desirable Qualifications:

• Master’s degree in Information Systems, Computer Science, Library and Information Science, Public or Business Administration.
• Experience with Integrated Library Systems (ILS) and experience working in a Library.
• Experience with Unix/Linux or general open-source solutions.
• Experience with Technical Project Management

• Director of Information Technology
• Assistant Director of Information Technology                     
• Information Technology Manager                 
• Systems Coordinator or (SCADA) Network and Systems Administrator
• IT Project Manager
• Business Systems Analyst I/II; Programmer Analyst I/II                 
• IT Specialist III                                            
• IT Specialist I/II