Chief Information Security Officer

The New York City Department of Probation is dedicated to improving public safety by supporting individuals on probation. DOP uses research-based practices to supervise and support people on probation and help prevent further interactions with the justice system. By expanding access to education and gainful employment opportunities, healthcare, family supports, and civic engagement, DOP empowers New Yorkers under their supervision to lead safe and thriving lives. The Department of Probation (DOP) is seeking a Chief Information Security Officer to join its Information Technology team. This role is critical to strengthening the agency's cybersecurity and physical security posture, addressing current vulnerabilities, and implementing enterprise-grade solutions. The ideal candidate will have hands-on experience with network security technologies (e.g., Palo Alto, Cisco), surveillance systems (e.g., Genetec), and a strong understanding of threat detection, incident response, and compliance. Responsibilities include, but are not limited to, the following: -Monitor network traffic and system logs using SIEM platforms and tools such as Palo Alto Panorama and Cisco SecureX to identify suspicious activity and investigate anomalies. -Conduct vulnerability scans and penetration tests using tools like Tenable and Qualys to identify and remediate risks across infrastructure and endpoints. -Respond to security alerts and incidents, contain threats, and support forensic investigations using packet capture tools, log analysis, and endpoint telemetry. -Configure and maintain firewalls (Palo Alto, Cisco ASA), IDS/IPS, endpoint protection, and centralized port security systems to enforce security policies and block malicious activity. -Lead the implementation of Genetec Security Center for CCTV coverage across agency facilities. -Develop and enforce a formal IT security framework, including policies, incident response plans, and user awareness training. -Deploy web filtering and site-blocking controls to prevent access to malicious or inappropriate websites. -Implement centralized port security to detect and block rogue devices on the network. - Lead the deployment of four Palo Alto firewalls to enhance protection of internal systems against external threats. -Collaborate with internal bureaus and external partners, including NYC Cyber Command, to assess risks, share intelligence, and improve overall security posture. -Evaluate IT and surveillance equipment prior to deployment to ensure compliance with security benchmarks. IT SECURITY SPECIALIST - 95622 Minimum Qualifications A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or, Education and/or experience which is equivalent to "1" above. Preferred Skills Minimum of 5 years of hands-on experience designing, implementing, and maintaining network security architecture including segmentation, access control, and threat mitigation strategies across enterprise environments the ideal candidate will demonstrate proven expertise with Palo Alto firewalls (including Panorama), Cisco networking and security platforms such as ASA, Firepower, and SecureX, as well as Genetec Security Center for surveillance and physical security integration. The role requires advanced proficiency with SIEM platforms, vulnerability management tools such as Tenable and Qualys, and scripting languages including Python and PowerShell for automation and log analysis. Strong experience in Identity and Access Management (IAM), encompassing role-based access control (RBAC), privileged access management (PAM), identity lifecycle processes, and integration with cloud and on-premises authentication systems, is essential. Candidates should also possess solid working knowledge of Windows Server, Active Directory, and cloud environments including Microsoft Azure and Amazon Web Services (AWS). The position demands the ability to perform complex threat analysis, conduct forensic investigations, and troubleshoot multi-layered security incidents in real time, along with excellent communication skills to translate technical findings into actionable insights for diverse stakeholders. Industry-recognized certifications such as CCNA Security, Palo Alto PCNSA, CompTIA Security+, or CISSP/CISM are highly desirable. Public Service Loan Forgiveness As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education's website at https://studentaid.gov/pslf/. Residency Requirement New York City Residency is not required for this position Additional Information The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.