Job Description

<div>
 Manage the risk to the organization posed by a variety of cyber security threats. Ensure confidentiality, integrity, and availability of systems, applications and data. Responsible for the organization's Security Program, including but not limited to daily operations of the oversight of audits, risk assessment process, and development, implementation and maintenance of policies and procedures. Create, propose and support innovative and compelling cyber security solutions. Collaborate with other technical staff on programs to identify and assess cyber security capabilities and performance in support of organizational growth and operational excellence. Lead the team to provide direction, guidance, assistance and/or mentorship to other staff and coworkers as required or requested. Essential Functions:
 <br/>
 Employees performing in this job function may perform some or all the duties. The omission of specific statements of duties does not exclude them from the position if the work is similar, related, or a logical assignment to the position.
 <br/>
 * Oversee the confidentiality, integrity and security of Clerk systems and data;
 <br/>
 * Manage and enhance the cyber security program;
 <br/>
 * Communicate and report on security events and incidents in accordance with state breach rules and requirements;
 <br/>
 * Ensure information security policies, standards and procedures are up-to-date;
 <br/>
 * Socialize and implement organizational cyber security maturity model;
 <br/>
 * Evaluate security trends, evolving threats, risks and vulnerabilities and recommend tools to mitigate risk as necessary;
 <br/>
 * Promote and sponsor organizational cyber security education and awareness program;
 <br/>
 * Submit timely and accurate security assessments and audits initiated by third party stakeholders;
 <br/>
 * Ensure gaps and deficiencies identified as a result of an audit are properly addressed;
 <br/>
 * Act as an advisor to the Senior Team in all information privacy, security and business continuity matters;
 <br/>
 * Oversee and continually ensure compliance with security related mandates, administrative orders and policies;
 <br/>
 * Ensure that the disaster recovery, business continuity, risk management, and access controls are tested and addressed;
 <br/>
 * Collaborate with operation divisions to establish governance for the security program;
 <br/>
 * Participate in the development, implementation and ongoing compliance monitoring of all vendor agreements to ensure security concerns, requirements and responsibilities are addressed;
 <br/>
 * Strategically advise on the development of new services or enhancements to exiting services to ensure "security by design" and "security by default" principles;
 <br/>
 * Coordinate with CIO to identify, prioritize and manage information security needs for future budget consideration;
 <br/>
 * Develop security relationships and procedures with external organizations;
 <br/>
 * Fully support the Clerk's Quality Policy and standards of Performance Excellence by delivering exemplary services to both internal and external customers. Provide the utmost in customer service efficiently, effectively and expeditiously;
 <br/>
 * Foster a productive work environment which elicits the utmost from co-workers and subordinates and promote a process of continual improvement in both quality and productivity throughout the organization;
 <br/>
 * Communicate with management, co-workers, staff, and the general public in a courteous and professional manner;
 <br/>
 * Conform with and abide by all regulations, policies, work procedures, and instructions;
 <br/>
 SUCCESS PROFILE
 <br/>
 Page 2 of 9
 <br/>
 * Act, dress and behave in a professional manner to reflect a positive image of the court;
 <br/>
 * Perform other functions, duties and conduct special projects and/or research as assigned. Minimum Qualifications Required:
 <br/>
 * Bachelor's Degree in Computer Science, Management Information Systems, or directly related area;
 <br/>
 * Minimum of seven (7) years of experience in information systems and five (5) years of IT security experience, to include three (3) years of management experience. Preferred Qualifications:
 <br/>
 * Certification in any of the following is preferred:
 <br/>
 o ISC2 - Certified Information Security Professional (CISSP);
 <br/>
 o ISC2 - Certified Information System Manager (CISM);
 <br/>
 o ISACA - Certified Information Security Auditor (CISA) Technical Requirements:
 <br/>
 * Possess strong desktop and peripheral knowledge/skills, network and security skills including TCP/IP, VPN, DNS, Digital Certificates, SSL, IPSec, web security architecture;
 <br/>
 * Knowledge of Security and Risk Management, Asset Security, Security Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, Software Development Security, CJIS Security Policy, NIST CSF;
 <br/>
 * Skilled in Access Control Management, Threat Detection and Response, Business Continuity, Data Loss Prevention Techniques and Tools, Malware Detection and Protection Tools, Vulnerability Management Techniques and Tools, Security Awareness Development, Policy Development, Security Operations, Fundamentals of Data Security;
 <br/>
 * Ability to:
 <br/>
 o Collaborate with department managers to determine security needs;
 <br/>
 o Plan and implement comprehensive security strategies;
 <br/>
 o Supervise, recruit, and train security personnel;
 <br/>
 o Gather security intelligence and implement preventative measures;
 <br/>
 o Develop work schedules, allocate tasks and monitor personnel performance;
 <br/>
 o Coordinate responses to emergencies and alarms, as well as compile incident reports;
 <br/>
 o Keep abreast of new technologies and advancements in security services;
 <br/>
 o Ensure compliance with organizational policies and security industry regulations;
 <br/>
 o Work onsite and remote;
 <br/>
 o Understand the types of contingency plans (e.g., Business Continuity Plan, Continuity of Operations Plan, Crisis Communications Plan, Disaster Recovery Plan, etc.);
 <br/>
 o Understand the importance of protecting data and information systems from accidental disclosure or destruction, unauthorized access or modification and inappropriate use or malicious compromise;
 <br/>
 o Understand the concept of inherent risk in end user behavior;
 <br/>
 o Demonstrate knowledge of methods to protect web services;
 <br/>
 o Understand the need for controls and privileges based on an individual's job duties;
 <br/>
 o Travel to all work locations including outlying branches. Working Conditions:
 <br/>
 This job is absent of disagreeable working conditions. This job is performed in an office work environment.
 <br/>
 This is a Safety and Security Sensitive Position in which a drug impairment constitutes an immediate and direct threat to public health, safety, or security, requiring a high degree of public trust in protecting court records and individual PII (Personally Identifiable Information). The position requires the employee to perform one or more of the following:
 <br/>
 * This position is eligible for Hybrid Remote and Flexible Work Schedule;
 <br/>
 SUCCESS PROFILE
 <br/>
 Page 3 of 9
 <br/>
 * Work with confidential customer and/or employee information;
 <br/>
 * Access our Case Management System "Odyssey" that contains PII (personally identifiable information);
 <br/>
 * Access our "Munis System" that contains our banking accounts information, financial information, and PII (personally identifiable information);
 <br/>
 * Access to Court Evidence that includes but is not limited to (controlled substances, criminal investigation documents, weapons, and other like items);
 <br/>
 * Access to the juvenile facility;
 <br/>
 * Handle cash and other forms of payment such as credit cards;
 <br/>
 * Set up differed payments for customers;
 <br/>
 * Operate heavy equipment such as a forklift and scissor lift;
 <br/>
 * Operate company vehicle. Physical Requirements:
 <br/>
 * Constant: sitting, walking, speaking and hearing.
 <br/>
 * Constant: typing, writing, and reading.
 <br/>
 * Occasional: standing, reaching
</div>